Lucene search

K
mozillaMozilla FoundationMFSA2006-66
HistoryNov 07, 2006 - 12:00 a.m.

RSA Signature Forgery (variant) — Mozilla

2006-11-0700:00:00
Mozilla Foundation
www.mozilla.org
15

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.369 Low

EPSS

Percentile

97.1%

MFSA 2006-60 reported that RSA digital signatures with a low exponent (typically 3) could be forged. This flaw was corrected in the Mozilla Network Security Services (NSS) library version 3.11.3 used by Firefox 2.0 and current development versions of Mozilla clients.

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.369 Low

EPSS

Percentile

97.1%