CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
52.8%
The remote host seems to be running an older version of OpenCA.
It is reported that OpenCA versions up to and including 0.9.1.3 contains
multiple flaws that may allow revoked or expired certificates to be accepted as valid.
# SPDX-FileCopyrightText: 2004 David Maciejak
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/a:openca:openca";
# Ref: Chris Covell and Gottfried Scheckenbach
if(description) {
script_oid("1.3.6.1.4.1.25623.1.0.14714");
script_version("2024-03-01T14:37:10+0000");
script_tag(name:"last_modification", value:"2024-03-01 14:37:10 +0000 (Fri, 01 Mar 2024)");
script_tag(name:"creation_date", value:"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)");
script_xref(name:"URL", value:"http://www.securityfocus.com/bid/9123");
script_cve_id("CVE-2003-0960");
script_xref(name:"OSVDB", value:"2884");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_name("OpenCA multiple signature validation bypass");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2004 David Maciejak");
script_family("Web application abuses");
script_dependencies("gb_openca_detect.nasl");
script_mandatory_keys("openca/installed");
script_tag(name:"solution", value:"Upgrade to the newest version of this software.");
script_tag(name:"summary", value:"The remote host seems to be running an older version of OpenCA.
It is reported that OpenCA versions up to and including 0.9.1.3 contains
multiple flaws that may allow revoked or expired certificates to be accepted as valid.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"remote_banner");
exit(0);
}
include("version_func.inc");
include("host_details.inc");
if( ! port = get_app_port( cpe:CPE ) )
exit( 0 );
if( ! vers = get_app_version( cpe:CPE, port:port ) )
exit( 0 );
if( version_is_less_equal( version:vers, test_version:"0.9.1.3" ) ) {
report = report_fixed_ver( installed_version:vers, fixed_version:"N/A" );
security_message( port:port, data:report );
exit( 0 );
}
exit( 99 );