CVE-2006-4790

verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when…

published September 14, 2006

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02556 · 84.9th percentile
Published
2006-09-14T19:00Z
EPSS history
Timeline
  • 14 SEP 19:00Z
    verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when…
    cvelistv5