The Comodo AAA Services Root certificate, which cross-signed vulnerable eMudhra certificates, retains the 'CKA_TRUST_EMAIL_PROTECTION' attribute in NSS and remains trusted for S/MIME in Thunderbird despite having its web trust bit disabled. This creates a potential security issue where eMudhra intermediate certificates with EKU extensions for TLS server and client authentication could potentially be used to sign S/MIME certificates if S/MIME implementations do not properly validate X.509 certificate paths and Extended Key Usage constraints.
| Vendor | Product | Versions |
|---|---|---|
| comodo | aaa services root certificate | — |
Loading…
