Total vulnerabilities in the database
etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.
| Software | From | Fixed in |
|---|---|---|
| pfsense / pfsense | - | 2.0.x |
| pfsense / pfsense | 1.2.1 | 1.2.1.x |
| pfsense / pfsense | 1.0.x | 1.0.x.x |
| pfsense / pfsense | 1.2.2 | 1.2.2.x |
| pfsense / pfsense | 1.2.3 | 1.2.3.x |