CVE-2006-5179 - CERT CVE
ID CVE-2006-5179
Sažetak Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.
Reference
CVSS
Base: 5.4
Impact: 6.9
Exploitability:4.9
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE COMPLETE
CVSS vektor AV:N/AC:H/Au:N/C:N/I:N/A:C
Zadnje važnije ažuriranje 08-03-2011 - 02:42
Objavljeno 10-10-2006 - 04:06