Skip to navigation

Security Advisory Moderate: pki security and enhancement update

Advisory: RHSA-2010:0838-1
Type: Security Advisory
Severity: Moderate
Issued on: 2010-11-08
Last updated on: 2010-11-08
Affected Products: Red Hat Certificate System v8
CVEs (cve.mitre.org): CVE-2004-2761
CVE-2010-3868
CVE-2010-3869

Details

Updated pki-ca, pki-util, and pki-common packages that fix three security
issues and add several enhancements are now available for Red Hat
Certificate System 8.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Red Hat Certificate System is an enterprise software system designed to
manage enterprise public key infrastructure (PKI) deployments. Simple
Certificate Enrollment Protocol (SCEP) is a PKI communication protocol
used to automatically enroll certificates for network devices.

The certificate authority allowed unauthenticated users to request the
one-time PIN in an SCEP request to be decrypted. An attacker able to sniff
an SCEP request from a network device could request the certificate
authority to decrypt the request, allowing them to obtain the one-time
PIN. With this update, the certificate authority only handles decryption
requests from authenticated registration authorities. (CVE-2010-3868)

The certificate authority allowed the one-time PIN used in SCEP requests
to be re-used. An attacker possessing a valid SCEP enrollment one-time PIN
could use it to generate an unlimited number of certificates.
(CVE-2010-3869)

The certificate authority used the MD5 hash algorithm to sign all SCEP
protocol responses. As MD5 is not collision resistant, an attacker could
use this flaw to perform an MD5 chosen-prefix collision attack to generate
attack-chosen output signed using the certificate authority's key.
(CVE-2004-2761)

This update also adds the following enhancements:

* New configuration options for the SCEP server can define the default and
allowed encryption and hash algorithms. These options allow disabling uses
of the weaker algorithms not required by network devices and prevent
possible downgrade attacks. These can be configured by adding the following
options to the certificate authority's CS.cfg configuration file:

ca.scep.encryptionAlgorithm=DES3
ca.scep.allowedEncryptionAlgorithms=DES3
ca.scep.hashAlgorithm=SHA1
ca.scep.allowedHashAlgorithms=SHA1,SHA256,SHA512

* With this update, the certificate authority's SCEP server is disabled by
default. The SCEP server can be enabled by adding the 'ca.scep.enable=true'
option to the certificate authority's CS.cfg configuration file.

* A separate key pair can now be configured for use in SCEP communication.
Previously, the main certificate authority's key pair was used for SCEP
communication too. A designated SCEP key pair can be referenced by adding
a new option, ca.scep.nickname=[scep certificate nickname], to the
certificate authority's CS.cfg configuration file.

* The certificate authority now allows the size of nonces used in SCEP
requests to be restricted by adding a new option, ca.scep.nonceSizeLimit=
[number of bytes], to the certificate authority's CS.cfg configuration
file. The limit is set to 16 bytes in the default CS.cfg configuration
file.

All users of Red Hat Certificate System 8 should upgrade to these updated
packages, which resolve these issues and add these enhancements.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Certificate System v8

SRPMS:
pki-ca-8.0.7-1.el5pki.src.rpm
File outdated by:  RHEA-2013:1871
    MD5: f075aed4e4a4b40eebb927bc37e915c2
SHA-256: 84fa5ce851ded5bfa8483f269ac65dd0257a258c8dff7a604b0d1b36cbb2e59e
pki-common-8.0.6-2.el5pki.src.rpm
File outdated by:  RHEA-2013:1871
    MD5: 86751bb1c86ad511030efcda65e81a19
SHA-256: 03156ed8cf51454d4e816f78613bc716c0a8aca462c1dbaa91f55920f331e547
pki-util-8.0.5-1.el5pki.src.rpm
File outdated by:  RHSA-2012:1103
    MD5: 7a7d4462f0b0ca2b133b6387291de8fb
SHA-256: 7089ea5d26986a1e1d088d6d80c85a0d095aac24382713878fc7dde68f7b6530
 
IA-32:
pki-ca-8.0.7-1.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: 3fb9b9dd04fdbc3f8f45c735950849ec
SHA-256: 145d90382692ddcb32e74d4dc231900536c6968e98d8c922a50d774aa839f479
pki-common-8.0.6-2.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: a3a5923a071b6a1db80c6e1806005340
SHA-256: 2fab558c01fae72d99fceb6ad145869a2d32d696a4d50088adc5f611bb548886
pki-common-javadoc-8.0.6-2.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: 73d0cc7879767486da32f647c09318fe
SHA-256: 62db92f18ccfbd5506dd0854a2e99ab2c8c9b6f0bfc6f933bd808440d89024cb
pki-util-8.0.5-1.el5pki.noarch.rpm
File outdated by:  RHSA-2012:1103
    MD5: cbd86d39734ab63cbc5de590f776faa5
SHA-256: a02398f8a871654f8741f9d6b76bfd794b2c2179fadd250b7c9bc2c26cca6abb
pki-util-javadoc-8.0.5-1.el5pki.noarch.rpm
File outdated by:  RHSA-2012:1103
    MD5: 8bc5507977b18e6a3bda34e70f12cb66
SHA-256: fd74c4a1edfc9c87aa6de3973d78f3af6a908e1affd8ba09c3e03e8b352b89a2
 
x86_64:
pki-ca-8.0.7-1.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: 3fb9b9dd04fdbc3f8f45c735950849ec
SHA-256: 145d90382692ddcb32e74d4dc231900536c6968e98d8c922a50d774aa839f479
pki-common-8.0.6-2.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: a3a5923a071b6a1db80c6e1806005340
SHA-256: 2fab558c01fae72d99fceb6ad145869a2d32d696a4d50088adc5f611bb548886
pki-common-javadoc-8.0.6-2.el5pki.noarch.rpm
File outdated by:  RHEA-2013:1871
    MD5: 73d0cc7879767486da32f647c09318fe
SHA-256: 62db92f18ccfbd5506dd0854a2e99ab2c8c9b6f0bfc6f933bd808440d89024cb
pki-util-8.0.5-1.el5pki.noarch.rpm
File outdated by:  RHSA-2012:1103
    MD5: cbd86d39734ab63cbc5de590f776faa5
SHA-256: a02398f8a871654f8741f9d6b76bfd794b2c2179fadd250b7c9bc2c26cca6abb
pki-util-javadoc-8.0.5-1.el5pki.noarch.rpm
File outdated by:  RHSA-2012:1103
    MD5: 8bc5507977b18e6a3bda34e70f12cb66
SHA-256: fd74c4a1edfc9c87aa6de3973d78f3af6a908e1affd8ba09c3e03e8b352b89a2
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

648882 - CVE-2010-3868 Certificate System: unauthenticated user can request SCEP one-time PIN decryption
648883 - CVE-2010-3869 Certificate System: SCEP one-time PIN reuse
648886 - CVE-2004-2761 MD5: MD5 Message-Digest Algorithm is not collision resistant


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/