CVE-2006-5179

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-10 · updated 2026-06-16

Description

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Affected products

Intoto Igateway Ssl-Vpn: all versions
Intoto Igateway Vpn: all versions

References

http://secunia.com/advisories/22206
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
http://www.vupen.com/english/advisories/2006/3859
http://secunia.com/advisories/22206
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
http://www.vupen.com/english/advisories/2006/3859

Get alerted when CVE-2006-5179 or the next vulnerability affects your stack