Insecure X.509 Certificate Creation in pfSense by Netgate
CVE-2011-4197
Currently unrated
What is CVE-2011-4197?
The PKI implementation in pfSense prior to version 2.0.1 inadequately handles X.509 certificates by automatically assigning a true value to the CA basic constraint. This flaw enables remote attackers to forge sub-certificates for any subject, leveraging possession of private keys. Such a vulnerability can lead to unauthorized access or impersonation, significantly undermining the security of the network infrastructure.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.