Lucene search

K
cve[email protected]CVE-2006-5179
HistoryOct 10, 2006 - 4:06 a.m.

CVE-2006-5179

2006-10-1004:06:00
NVD-CWE-Other
web.nvd.nist.gov
23
intoto
igateway
vpn
ssl-vpn
vulnerability
cve-2006-5179
nvd

9.2 High

AI Score

Confidence

High

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

65.4%

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) “public exponent” or (2) “public modulus” values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

9.2 High

AI Score

Confidence

High

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

65.4%