VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 15, 2003· Updated Apr 16, 2026

CVE-2003-0960

CVE-2003-0960

Description

OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.

Affected products

9
  • Openca/Openca9 versions
    cpe:2.3:a:openca:openca:0.8.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:openca:openca:0.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openca:openca:0.9.1.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.