Entrust ESP Certificate Path Verification Vulnerability

Bugtraq ID:	25471
Class:	Access Validation Error
CVE:	CVE-2007-4594
Remote:	Yes
Local:	No
Published:	Aug 28 2007 12:00AM
Updated:	May 07 2015 05:35PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Entrust Entelligence Security Provider 8
Not Vulnerable:

Entrust ESP Certificate Path Verification Vulnerability

Entrust ESP fails to properly validate certificate chains.

Successfully exploiting this issue may allow attackers to use invalid security certificates, possibly aiding them in further attacks.

Entrust Entelligence Security Provider 8 is vulnerable to this issue; other versions may also be affected.

Entrust ESP Certificate Path Verification Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Entrust ESP Certificate Path Verification Vulnerability

Solution:
The vendor released patch 132192 to address this issue. The patch is available to customers through the vendor's customer portal website. Contact the vendor for more information.

Entrust ESP Certificate Path Verification Vulnerability

References:

• Entelligence Security Provider Product Page (Entrust)