Signature Detail
Short Name |
SSL:GNUTLS-CERT-POLICY-BYPASS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SSL |
Keywords |
GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass |
Release Date |
2015/06/12 |
Update Number |
2504 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SSL: GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass
A policy-bypass vulnerability has been found in GnuTLS. The vulnerability is due to an error in lib/x509/verify.c where an X.509 version 1 certificate is incorrectly treated as an intermediate CA certificate. A remote attacker could exploit this vulnerability to bypass certificate validation if the target system has in its trusted list a CA that issues X.509 version 1 certificates.
References
- CVE: CVE-2014-1959