Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenCA Crypto-Utils.Lib签名验证漏洞
Vulnerability Description
OpenCA是一个开放源代码的一个全功能的接口结构，它用来在全PKI环境下管理x509的数字证书。 OpenCA的crypto-utils.lib库存在漏洞，远程攻击者可以利用这个漏洞可导致OpenCA接收恶意证书。 OpenCA包含通用加密操作库 - crypto-utils.lib，这个库包含检查签名(libCheckSignature)的函数，这个函数装载OpenCA数据库中已使用的签名证书，及最后确保已使用的签名证书等同于数据库中的证书。 在数据库中的证书和签名者的证书的对比只执行基于证书序列号的
CVSS Information
N/A
Vulnerability Type
N/A