CVE-2003-0960

CVE-2003-0960 describes a critical vulnerability in OpenCA versions prior to 0.9.1.4, where the software fails to correctly validate certificate chains. This flaw allows OpenCA to accept revoked or expired certificates, potentially undermining the security of systems relying on its certificate authority functions. With a CVSS score of 7.5, this vulnerability is considered high severity, allowing unauthenticated attackers to compromise confidentiality, integrity, and availability over the network with low attack complexity. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.