CVE-2006-5179
Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra…
Does this matter?
Lower severity and a low EPSS score (0.76%). Track it; it rarely justifies an emergency change on its own.
Description
Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.
- CVSS 2.0
- 5.4 MEDIUMAV:N/AC:H/Au:N/C:N/I:N/A:C
- EPSS
- 0.76% probability · 53th percentile
- CISA KEV
- Not listed
- Affected
- intoto/igateway ssl-vpn · intoto/igateway vpn
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22206Vendor Advisory
- http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=enVendor Advisory
- http://www.vupen.com/english/advisories/2006/3859
- http://secunia.com/advisories/22206Vendor Advisory
- http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=enVendor Advisory
- http://www.vupen.com/english/advisories/2006/3859
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.