CVE-2006-5179

Published: Oct 10, 2006Modified: Apr 23, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Affected (2)

Products: Intoto: Igateway Ssl Vpn, Igateway Vpn

2 products

Igateway Ssl Vpn

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Intoto Igateway Ssl Vpn	All versions
Intoto Igateway Vpn	All versions

References (6)

http://secunia.com/advisories/22206

Source: cve@mitre.org

Vendor Advisory

http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3859

Source: cve@mitre.org

http://secunia.com/advisories/22206

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3859

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.