CVE-2006-5179 | BDVDB-2026-19610 Detail

Description#

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
http://www.vupen.com/english/advisories/2006/3859
http://secunia.com/advisories/22206

Exploit#

No public exploit known

History#

Version 12006-10-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.