VULNERABILITY INTELLIGENCE

CVE-2006-5179

CVSS score5.4 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2006-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:C

Description

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Primary references