« Volver al listado

CVE-2011-4197

Estado: ModificadaAlta (7.5)—

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pfsense — Pfsense

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-4197",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-01-03T19:55:03.560",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0152.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/46780",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/77982",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/51169",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71969",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/bsdperimeter/pfsense/commit/1379d66f11aaf72982a70287b83e24efcd18898e",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/bsdperimeter/pfsense/commit/87b4deb2b2dae9013e6aa0fe490d6a5a04a27894",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.trustmatta.com/advisories/MATTA-2011-001.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0152.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/46780",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/77982",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/51169",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71969",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/bsdperimeter/pfsense/commit/1379d66f11aaf72982a70287b83e24efcd18898e",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/bsdperimeter/pfsense/commit/87b4deb2b2dae9013e6aa0fe490d6a5a04a27894",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.trustmatta.com/advisories/MATTA-2011-001.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key."
    },
    {
      "lang": "es",
      "value": "etc/inc/certs.inc en la implementación de PKI pfSense antes de v2.0.1, crea cada certificado X.509 con un valor verdadero para la restricción básica de CA, lo que permite a atacantes remotos crear sub-certificados para temas de su elección aprovechando la clave privada."
    }
  ],
  "lastModified": "2026-06-16T23:34:34.497",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pfsense:pfsense:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2B94DE8-E8F3-4534-93E3-1C5F93F19E1B",
              "versionEndIncluding": "2.0"
            },
            {
              "criteria": "cpe:2.3:a:pfsense:pfsense:1.0.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1882D857-FF4A-4A5E-971D-2DC67B13FC1A"
            },
            {
              "criteria": "cpe:2.3:a:pfsense:pfsense:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91B2C820-8BE9-48D0-848F-A6C6C7D8094A"
            },
            {
              "criteria": "cpe:2.3:a:pfsense:pfsense:1.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA3FBF3F-BE16-48DC-AA01-F9BB2DEED01E"
            },
            {
              "criteria": "cpe:2.3:a:pfsense:pfsense:1.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A52BDC92-9630-46EB-8162-484D6DA1868B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}