Description

Multiple vulnerabilities have been reported in OpenCA, which can result in revoked or expired certificates being accepted as valid.

The vulnerabilities are caused due to errors in the regular expressions in "OpenCA::PKCS7", and in the "crypto-utils.lib" library when creating X.509 objects and when checking serials of certificates used for creating a PKCS#7 signature.

The vulnerabilities affect version 0.9.1.3 and prior.

Solution
Update to version 0.9.1.4 and use newer snapshots than openca-0.9-SNAP-20031125.tar.gz or apply patch (see original advisory).
Further details available in Customer Area

Original Advisory
http://www.openca.org/news/CAN-2003-0960.txt

Deep Links
Links available in Customer Area