NVD

Id
59376  
Name
CVE-2006-0645  
Description
Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-10  
Modified Date
2011-03-07  
Seq
2006-0645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305257 59376 CVE-2006-0645 http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup  View
305258 59376 CVE-2006-0645 http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup  View
305259 59376 CVE-2006-0645 http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch  View
305260 59376 CVE-2006-0645 [gnutls-dev] 20060209 Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release  View
305261 59376 CVE-2006-0645 [gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release  View
305262 59376 CVE-2006-0645 [gnutls-dev] 20060209 GnuTLS 1.3.4 - Experimental - Security release  View
305263 59376 CVE-2006-0645 oval:org.mitre.oval:def:10540  View
305264 59376 CVE-2006-0645 RHSA-2006:0207  View
305265 59376 CVE-2006-0645 446  View
305266 59376 CVE-2006-0645 1015612  View
305267 59376 CVE-2006-0645 DSA-985  View
305268 59376 CVE-2006-0645 DSA-986  View
305269 59376 CVE-2006-0645 GLSA-200602-08  View
305270 59376 CVE-2006-0645 http://www.gleg.net/protover_ssl.shtml  View
305271 59376 CVE-2006-0645 MDKSA-2006:039  View
305272 59376 CVE-2006-0645 FEDORA-2006-107  View
305273 59376 CVE-2006-0645 20060209 ProtoVer SSL: GnuTLS  View
305274 59376 CVE-2006-0645 16568  View
305275 59376 CVE-2006-0645 2006-0008  View
305276 59376 CVE-2006-0645 USN-251-1  View
305277 59376 CVE-2006-0645 ADV-2006-0496  View
305278 59376 CVE-2006-0645 gnutls-libtasn1-der-dos(24606)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57900 JVNDB-2006-000096 GnuTLS の Libtasn1 におけるサービス運用妨害 (DoS) の脆弱性 GNU TLS の Libtasn1 には、DER (Distinguished Encoding Rules) に基づいてバイナリ変換が行われた ASN.1 オブジェクトのデコード処理が不適切である脆弱性が存在します。 CVE-2006-0645 16747 CVE-2006-0645 59376 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000096.html 2006-02-09 2007-04-01 View