NVD

Id
64063  
Name
CVE-2006-5462  
Description
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-11-08  
Modified Date
2011-03-07  
Seq
2006-5462  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
334058 64063 CVE-2006-5462 20061101-01-P  View
334059 64063 CVE-2006-5462 oval:org.mitre.oval:def:10478  View
334060 64063 CVE-2006-5462 RHSA-2006:0733  View
334061 64063 CVE-2006-5462 RHSA-2006:0734  View
334062 64063 CVE-2006-5462 RHSA-2006:0735  View
334063 64063 CVE-2006-5462 GLSA-200612-06  View
334064 64063 CVE-2006-5462 GLSA-200612-07  View
334065 64063 CVE-2006-5462 GLSA-200612-08  View
334066 64063 CVE-2006-5462 1017180  View
334067 64063 CVE-2006-5462 1017181  View
334068 64063 CVE-2006-5462 1017182  View
334069 64063 CVE-2006-5462 102781  View
334070 64063 CVE-2006-5462 http://support.avaya.com/elmodocs2/security/ASA-2006-246.htm  View
334071 64063 CVE-2006-5462 DSA-1224  View
334072 64063 CVE-2006-5462 DSA-1225  View
334073 64063 CVE-2006-5462 DSA-1227  View
334074 64063 CVE-2006-5462 VU#335392  View
334075 64063 CVE-2006-5462 MDKSA-2006:205  View
334076 64063 CVE-2006-5462 MDKSA-2006:206  View
334077 64063 CVE-2006-5462 http://www.mozilla.org/security/announce/2006/mfsa2006-60.html  View
334078 64063 CVE-2006-5462 http://www.mozilla.org/security/announce/2006/mfsa2006-66.html  View
334079 64063 CVE-2006-5462 SUSE-SA:2006:068  View
334080 64063 CVE-2006-5462 USN-381-1  View
334081 64063 CVE-2006-5462 USN-382-1  View
334082 64063 CVE-2006-5462 TA06-312A  View
334083 64063 CVE-2006-5462 ADV-2006-3748  View
334084 64063 CVE-2006-5462 ADV-2006-4387  View
334085 64063 CVE-2006-5462 ADV-2007-0293  View
334086 64063 CVE-2006-5462 ADV-2007-1198  View
334087 64063 CVE-2006-5462 ADV-2008-0083  View
334088 64063 CVE-2006-5462 SSRT061181  View
334089 64063 CVE-2006-5462 mozilla-nss-security-bypass(30098)  View
334090 64063 CVE-2006-5462 https://bugzilla.mozilla.org/show_bug.cgi?id=356215  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58565 JVNDB-2006-000761 Mozilla Network Security Services (NSS) における RSA 署名を偽装可能な脆弱性 Mozilla 製品に含まれる暗号ライブラリ Network Security Service (NSS) には、署名の付加データの処理が不適切であるため、公開指数に 3 である RSA 署名が偽装可能な脆弱性が存在します。 CVE-2006-5462 21564 CVE-2006-5462 64063 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000761.html 2006-11-07 2007-04-27 View