Unscored severity · published Oct 10, 2006
CVE-2006-5179
Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Igateway Ssl-vpn · Intoto
All versions, or not specified · source: NVD
IV
Igateway Vpn · Intoto
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5179
Vendor Advisory
http://secunia.com/advisories/22206
Vendor Advisory
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
www.vupen.com
http://www.vupen.com/english/advisories/2006/3859