NVD

Id
63807  
Name
CVE-2006-5201  
Description
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-5201  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332571 63807 CVE-2006-5201 102648  View
332572 63807 CVE-2006-5201 102657  View
332573 63807 CVE-2006-5201 http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm  View
332574 63807 CVE-2006-5201 VU#845620  View
332575 63807 CVE-2006-5201 ADV-2006-3898  View
332576 63807 CVE-2006-5201 ADV-2006-3899  View
332577 63807 CVE-2006-5201 ADV-2006-3960  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58338 JVNDB-2006-000534 複数の Sun 製品における RSA 署名の偽造に関する脆弱性 Sun Solaris に含まれる RSA アルゴリズムを使用している複数の Sun 製品 (NSS、JDK and JRE、SDK and JRE、JSSE、Secure Global Desktop、StarOffice) には、OpenSSL の RSA 署名の偽造に関する脆弱性が存在します。 CVE-2006-5201 21303 CVE-2006-5201 63807 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000534.html 2006-09-05 2007-04-01 View