Red Hat Security AdvisoryRHSA-2006:0680
gnutls security update
Released 2006-09-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gnutls-1.0.20-3.2.3, gnutls-1.0.20-3.2.3.i386, gnutls-1.0.20-3.2.3.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 gnutls-1.0.20-3.2.3, gnutls-1.0.20-3.2.3.i386, gnutls-devel-1.0.20-3.2.3 +1
- Red Hat Enterprise Linux ES version 4 gnutls-1.0.20-3.2.3, gnutls-1.0.20-3.2.3.i386, gnutls-1.0.20-3.2.3.ia64 +3
- Red Hat Enterprise Linux WS version 4 gnutls-1.0.20-3.2.3, gnutls-1.0.20-3.2.3.i386, gnutls-1.0.20-3.2.3.ia64 +3
Fixes 1 record
Priority LOW 28
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02556 · Published 2006-09-14 · Fixed
