NVD

Id
63599  
Name
CVE-2006-4991  
Description
RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-25  
Modified Date
2008-09-05  
Seq
2006-4991  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
331478 63599 CVE-2006-4991 20060921 RSA Keyon Log verification bypass vulnerability  View
331479 63599 CVE-2006-4991 20060921 RSA Keyon Log verification bypass vulnerability  View
331480 63599 CVE-2006-4991 20136  View
331481 63599 CVE-2006-4991 rsa-keon-log-file-manipulation(29065)  View
331482 63599 CVE-2006-4991 rsa-keon-logserver-file-manipulation(29068)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60951 JVNDB-2006-003217 RSA KeonCA Manager における悪意のある認証局動作を隠される脆弱性 RSA Keon Certificate Authority (KeonCA) Manager は、ローテーション中にのみ署名されるため、悪意のある認証局 (CA) 動作を隠される脆弱性が存在します。 CVE-2006-4991 21093 CVE-2006-4991 63599 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003217.html 2006-09-25 2012-12-20 View