CVE-2011-4197

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows…

published January 3, 2012

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01924 · 79.7th percentile
Published
2012-01-03T19:00Z
EPSS history
Timeline
  • 03 JAN 19:00Z
    etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows…
    cvelistv5