CVE

Id
20894  
CVE No.
CVE-2006-4790  
Status
Candidate  
Description
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.  
Phase
Assigned (20060913)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
197598 20894 CVE-2006-4790 MLIST:[gnutls-dev] 20060908 Variant of Bleichenbacher"s crypto 06 rump session attack  View
197599 20894 CVE-2006-4790 URL:http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html  View
197600 20894 CVE-2006-4790 MLIST:[gnutls-dev] 20060912 Re: Variant of Bleichenbacher"s crypto 06 rump session attack  View
197601 20894 CVE-2006-4790 URL:http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001212.html  View
197602 20894 CVE-2006-4790 CONFIRM:http://www.gnu.org/software/gnutls/security.html  View
197603 20894 CVE-2006-4790 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm  View
197604 20894 CVE-2006-4790 DEBIAN:DSA-1182  View
197605 20894 CVE-2006-4790 URL:http://www.debian.org/security/2006/dsa-1182  View
197606 20894 CVE-2006-4790 GENTOO:GLSA-200609-15  View
197607 20894 CVE-2006-4790 URL:http://security.gentoo.org/glsa/glsa-200609-15.xml  View
197608 20894 CVE-2006-4790 MANDRIVA:MDKSA-2006:166  View
197609 20894 CVE-2006-4790 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:166  View
197610 20894 CVE-2006-4790 REDHAT:RHSA-2006:0680  View
197611 20894 CVE-2006-4790 URL:http://www.redhat.com/support/errata/RHSA-2006-0680.html  View
197612 20894 CVE-2006-4790 SUNALERT:102648  View
197613 20894 CVE-2006-4790 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1  View
197614 20894 CVE-2006-4790 SUNALERT:102970  View
197615 20894 CVE-2006-4790 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102970-1  View
197616 20894 CVE-2006-4790 SUSE:SUSE-SR:2006:023  View
197617 20894 CVE-2006-4790 URL:http://www.novell.com/linux/security/advisories/2006_23_sr.html  View
197618 20894 CVE-2006-4790 SUSE:SUSE-SA:2007:010  View
197619 20894 CVE-2006-4790 URL:http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html  View
197620 20894 CVE-2006-4790 UBUNTU:USN-348-1  View
197621 20894 CVE-2006-4790 URL:http://www.ubuntu.com/usn/usn-348-1  View
197622 20894 CVE-2006-4790 BID:20027  View
197623 20894 CVE-2006-4790 URL:http://www.securityfocus.com/bid/20027  View
197624 20894 CVE-2006-4790 OVAL:oval:org.mitre.oval:def:9937  View
197625 20894 CVE-2006-4790 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9937  View
197626 20894 CVE-2006-4790 VUPEN:ADV-2006-3635  View
197627 20894 CVE-2006-4790 URL:http://www.vupen.com/english/advisories/2006/3635  View
197628 20894 CVE-2006-4790 VUPEN:ADV-2006-3899  View
197629 20894 CVE-2006-4790 URL:http://www.vupen.com/english/advisories/2006/3899  View
197630 20894 CVE-2006-4790 VUPEN:ADV-2007-2289  View
197631 20894 CVE-2006-4790 URL:http://www.vupen.com/english/advisories/2007/2289  View
197632 20894 CVE-2006-4790 SECTRACK:1016844  View
197633 20894 CVE-2006-4790 URL:http://securitytracker.com/id?1016844  View
197634 20894 CVE-2006-4790 SECUNIA:21942  View
197635 20894 CVE-2006-4790 URL:http://secunia.com/advisories/21942  View
197636 20894 CVE-2006-4790 SECUNIA:21937  View
197637 20894 CVE-2006-4790 URL:http://secunia.com/advisories/21937  View
197638 20894 CVE-2006-4790 SECUNIA:21973  View
197639 20894 CVE-2006-4790 URL:http://secunia.com/advisories/21973  View
197640 20894 CVE-2006-4790 SECUNIA:22049  View
197641 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22049  View
197642 20894 CVE-2006-4790 SECUNIA:22084  View
197643 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22084  View
197644 20894 CVE-2006-4790 SECUNIA:22097  View
197645 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22097  View
197646 20894 CVE-2006-4790 SECUNIA:22226  View
197647 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22226  View
197648 20894 CVE-2006-4790 SECUNIA:22080  View
197649 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22080  View
197650 20894 CVE-2006-4790 SECUNIA:22992  View
197651 20894 CVE-2006-4790 URL:http://secunia.com/advisories/22992  View
197652 20894 CVE-2006-4790 SECUNIA:25762  View
197653 20894 CVE-2006-4790 URL:http://secunia.com/advisories/25762  View
197654 20894 CVE-2006-4790 XF:gnutls-rsakey-security-bypass(28953)  View

Related JVN