CVE-2006-5484

Опубликовано: 24 окт. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.

Ссылки

http://secunia.com/advisories/22350
Patch
Third Party Advisory
http://securitytracker.com/id?1017060
Patch
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017061
Patch
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/845620
Third Party Advisory
US Government Resource
http://www.ssh.com/company/news/2006/english/security/article/786/
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4032
Permissions Required
http://secunia.com/advisories/22350
Patch
Third Party Advisory
http://securitytracker.com/id?1017060
Patch
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017061
Patch
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/845620
Third Party Advisory
US Government Resource
http://www.ssh.com/company/news/2006/english/security/article/786/
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4032
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*

Версия до 5.1.0 (включая)

cpe:2.3:a:ssh:tectia_connector:*:*:*:*:*:*:*:*

Версия до 5.1.0 (включая)

cpe:2.3:a:ssh:tectia_manager:*:*:*:*:*:*:*:*

Версия до 2.2.0 (включая)

cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*

Версия до 5.1.0 (включая)

EPSS

Процентиль: 82%

0.01748

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f6g8-8p5j-hphv

github

почти 4 года назад

EPSS

Процентиль: 82%

0.01748

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other