远程 Redhat Enterprise Linux 5 主机上安装的程序包受到 RHSA-2010:0838 公告中提及的多个漏洞影响。

  - MD5：MD5 消息摘要算法不抗冲突 (CVE-2004-2761)

  - 证书系统：未经身份验证的用户可请求 SCEP 一次性 PIN 解密 (CVE-2010-3868)

  - 证书系统：SCEP 一次性 PIN 重用 (CVE-2010-3869)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0838 advisory.

    Red Hat Certificate System is an enterprise software system designed to     manage enterprise public key infrastructure (PKI) deployments. Simple     Certificate Enrollment Protocol (SCEP) is a PKI communication protocol     used to automatically enroll certificates for network devices.

    The certificate authority allowed unauthenticated users to request the     one-time PIN in an SCEP request to be decrypted. An attacker able to sniff     an SCEP request from a network device could request the certificate     authority to decrypt the request, allowing them to obtain the one-time     PIN. With this update, the certificate authority only handles decryption     requests from authenticated registration authorities. (CVE-2010-3868)

    The certificate authority allowed the one-time PIN used in SCEP requests     to be re-used. An attacker possessing a valid SCEP enrollment one-time PIN     could use it to generate an unlimited number of certificates.
    (CVE-2010-3869)

    The certificate authority used the MD5 hash algorithm to sign all SCEP     protocol responses. As MD5 is not collision resistant, an attacker could     use this flaw to perform an MD5 chosen-prefix collision attack to generate     attack-chosen output signed using the certificate authority's key.
    (CVE-2004-2761)

    This update also adds the following enhancements:

    * New configuration options for the SCEP server can define the default and     allowed encryption and hash algorithms. These options allow disabling uses     of the weaker algorithms not required by network devices and prevent     possible downgrade attacks. These can be configured by adding the following     options to the certificate authority's CS.cfg configuration file:

       ca.scep.encryptionAlgorithm=DES3        ca.scep.allowedEncryptionAlgorithms=DES3        ca.scep.hashAlgorithm=SHA1        ca.scep.allowedHashAlgorithms=SHA1,SHA256,SHA512

    * With this update, the certificate authority's SCEP server is disabled by     default. The SCEP server can be enabled by adding the 'ca.scep.enable=true'     option to the certificate authority's CS.cfg configuration file.

    * A separate key pair can now be configured for use in SCEP communication.
    Previously, the main certificate authority's key pair was used for SCEP     communication too. A designated SCEP key pair can be referenced by adding     a new option, ca.scep.nickname=[scep certificate nickname], to the     certificate authority's CS.cfg configuration file.

    * The certificate authority now allows the size of nonces used in SCEP     requests to be restricted by adding a new option, ca.scep.nonceSizeLimit=     [number of bytes], to the certificate authority's CS.cfg configuration     file. The limit is set to 16 bytes in the default CS.cfg configuration     file.

    All users of Red Hat Certificate System 8 should upgrade to these updated     packages, which resolve these issues and add these enhancements.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモート Redhat Enterprise Linux 5 ホストに、RHSA-2010:0838 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - MD5: MD5 Message-Digest アルゴリズムに衝突に対する耐性がありません (CVE-2004-2761)

  - 証明書システム: 認証されていないユーザーが、SCEP ワンタイム PIN 復号化をリクエストする可能性があります (CVE-2010-3868)

  - 証明書システム: SCEP ワンタイム PIN の再利用 (CVE-2010-3869)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

遠端 Redhat Enterprise Linux 5 主機上安裝的套件受到 RHSA-2010:0838 公告中提及的多個弱點影響。

  - MD5：MD5 訊息摘要演算法不具抗衝突性 (CVE-2004-2761)

  - Certificate System：未經驗證的使用者可要求 SCEP 一次性 PIN 解密 (CVE-2010-3868)

  - Certificate System：SCEP 一次性 PIN 重複使用 (CVE-2010-3869)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
193666	RHEL 5：pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
193666	RHEL 5 : pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
193666	RHEL 5 : pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
193666	RHEL 5：pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical

偵測

搜尋 Plugin

critical

critical

critical

critical