CVE-2006-5179 - Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940

Back Back to CVE browser

MEDIUM

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940

Published Oct 6, 2006

5.4

MEDIUM

CVSS 2.0

EPSS 0.76%

Description

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://secunia.com/advisories/22206
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
x_refsource_MISCVendor Advisory
http://www.vupen.com/english/advisories/2006/3859
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5164
Advisory

Link	Providers	Tags
http://secunia.com/advisories/22206		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en		x_refsource_MISCVendor Advisory
http://www.vupen.com/english/advisories/2006/3859		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5164		Advisory