CVE-2004-0004

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users.

• http://marc.info/?l=bugtraq&m=107427313700554&w=2
• http://www.kb.cert.org/vuls/id/336446US Government Resource
• http://www.openca.org/news/CAN-2004-0004.txtPatch, Vendor Advisory
• http://www.osvdb.org/3615
• http://www.securityfocus.com/bid/9435Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14847
• http://marc.info/?l=bugtraq&m=107427313700554&w=2
• http://www.kb.cert.org/vuls/id/336446US Government Resource
• http://www.openca.org/news/CAN-2004-0004.txtPatch, Vendor Advisory
• http://www.osvdb.org/3615
• http://www.securityfocus.com/bid/9435Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14847

Published

Feb 17, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0001Unknown vulnerability in the eflags checking in the 32-bit p…
• CVE-2004-0002The TCP MSS (maximum segment size) functionality in netinet …
• CVE-2004-0003Unknown vulnerability in Linux kernel before 2.4.22 allows l…
• CVE-2004-0005Multiple buffer overflows in Gaim 0.75 allow remote attacker…9.8
• CVE-2004-0006Multiple buffer overflows in Gaim 0.75 and earlier, and Ultr…
• CVE-2004-0007Buffer overflow in the Extract Info Field Function for (1) M…
• CVE-2004-0008Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic…
• CVE-2004-0009Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set…
• CVE-2004-0010Stack-based buffer overflow in the ncp_lookup function for n…