RHSA-2009:0007Medium

Red Hat Security Advisory: rhpki security and bug fix update

Published
January 29, 2009
Last Modified
November 21, 2025

🔗 CVE IDs covered (3)

CVE-2008-2367 →CVE-2008-2368 →CVE-2008-5082 →

📋 Description

CVE-2008-2367 — System: insecure config file permissions CVE-2008-2368 — System: plain text passwords stored in debug log CVE-2008-5082 — System: missing public key challenge proof verification in the TPS component

🎯 Affected products22

  • Red Hat Certificate System 7.3 for 4AS
  • Red Hat Certificate System 7.3 for 4ES
  • pkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • pkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-tps-0:7.3.0-23.el4.i386 as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-tps-0:7.3.0-23.el4.i386 as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-tps-0:7.3.0-23.el4.x86_64 as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-tps-0:7.3.0-23.el4.x86_64 as a component of Red Hat Certificate System 7.3 for 4ES
  • rhpki-util-0:7.3.0-20.el4.noarch as a component of Red Hat Certificate System 7.3 for 4AS
  • rhpki-util-0:7.3.0-20.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ES

✅ Remediation

Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html

🔗 References (7)