Lucene search

[email protected]CVE-2006-5201

HistoryOct 10, 2006 - 4:06 a.m.

CVE-2006-5201

2006-10-1004:06:00

[email protected]

web.nvd.nist.gov

cve

2006

5201

rsa

key

vulnerability

sun solaris

nss

java jdk

jre

sdk

jsse

ipsec

ike

secure global desktop

staroffice

pkcs-1

padding

hash

remote attackers

x.509

certificates

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

7.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.8%

JSON

Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.

Affected configurations

NVD

Node

sunnss

sunsecure_global_desktop

sunstaroffice

Node

sunsolarisMatch9.0sparc

sunsolarisMatch10.0sparc

sunsunosMatch5.8

Node

sunjdkMatch1.5.0-

sunjdkMatch1.5.0update1

sunjdkMatch1.5.0update2

sunjdkMatch1.5.0update3

sunjdkMatch1.5.0update4

sunjdkMatch1.5.0update5

sunjdkMatch1.5.0update6

sunjdkMatch1.5.0update7

sunjdkMatch1.5.0update7_b03

sunjdkMatch1.5.0update8

Node

sunjreMatch1.3.1-

sunjreMatch1.3.1_2

sunjreMatch1.3.1_03

sunjreMatch1.3.1_04

sunjreMatch1.3.1_05

sunjreMatch1.3.1_06

sunjreMatch1.3.1_07

sunjreMatch1.3.1_08

sunjreMatch1.3.1_09

sunjreMatch1.3.1_10

sunjreMatch1.3.1_11

sunjreMatch1.3.1_12

sunjreMatch1.3.1_13

sunjreMatch1.3.1_14

sunjreMatch1.3.1_15

sunjreMatch1.3.1_16

sunjreMatch1.3.1_17

sunjreMatch1.3.1_18

sunjreMatch1.3.1_19

sunjreMatch1.4.2-

sunjreMatch1.4.2_1

sunjreMatch1.4.2_2

sunjreMatch1.4.2_3

sunjreMatch1.4.2_4

sunjreMatch1.4.2_5

sunjreMatch1.4.2_6

sunjreMatch1.4.2_7

sunjreMatch1.4.2_8

sunjreMatch1.4.2_9

sunjreMatch1.4.2_10

sunjreMatch1.4.2_11

sunjreMatch1.4.2_12

sunjreMatch1.5.0-

sunjreMatch1.5.0update1

sunjreMatch1.5.0update2

sunjreMatch1.5.0update3

sunjreMatch1.5.0update4

sunjreMatch1.5.0update5

sunjreMatch1.5.0update6

sunjreMatch1.5.0update7

sunjreMatch1.5.0update8

Node

sunsdkMatch1.3.1

sunsdkMatch1.3.1_01

sunsdkMatch1.3.1_01a

sunsdkMatch1.3.1_02

sunsdkMatch1.3.1_03

sunsdkMatch1.3.1_04

sunsdkMatch1.3.1_05

sunsdkMatch1.3.1_06

sunsdkMatch1.3.1_07

sunsdkMatch1.3.1_08

sunsdkMatch1.3.1_09

sunsdkMatch1.3.1_10

sunsdkMatch1.3.1_11

sunsdkMatch1.3.1_12

sunsdkMatch1.3.1_13

sunsdkMatch1.3.1_14

sunsdkMatch1.3.1_15

sunsdkMatch1.3.1_16

sunsdkMatch1.3.1_17

sunsdkMatch1.3.1_18

sunsdkMatch1.3.1_19

sunsdkMatch1.4.2

sunsdkMatch1.4.2_1

sunsdkMatch1.4.2_2

sunsdkMatch1.4.2_3

sunsdkMatch1.4.2_4

sunsdkMatch1.4.2_5

sunsdkMatch1.4.2_6

sunsdkMatch1.4.2_7

sunsdkMatch1.4.2_8

sunsdkMatch1.4.2_9

sunsdkMatch1.4.2_10

sunsdkMatch1.4.2_11

sunsdkMatch1.4.2_12

Node

sunjsseMatch1.0.3

sunjsseMatch1.0.3_01

sunjsseMatch1.0.3_02

sunjsseMatch1.0.3_03

CPENameOperatorVersion
sun:nsssun nsseq*
sun:secure_global_desktopsun secure global desktopeq*
sun:starofficesun starofficeeq*

CPE	Name	Operator	Version
sun:nss	sun nss	eq	*
sun:secure_global_desktop	sun secure global desktop	eq	*
sun:staroffice	sun staroffice	eq	*

References

secunia.com/advisories/22204

secunia.com/advisories/22226

secunia.com/advisories/22325

secunia.com/advisories/22992

sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1

sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1

support.avaya.com/elmodocs2/security/ASA-2006-250.htm

www.kb.cert.org/vuls/id/845620

www.vupen.com/english/advisories/2006/3898

www.vupen.com/english/advisories/2006/3899

www.vupen.com/english/advisories/2006/3960

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

7.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.8%

JSON

Related for CVE-2006-5201

cbl_mariner1 nvd2 ubuntucve1 cvelist2 nessus45 cve1