CVEvulnerability

CVE-2006-5201

4.0 MEDIUM Published 2006-10-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-10-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:N/I:P/A:P

Description

Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.

Affected configurations

• sun nss • sun secure global desktop • sun staroffice • sun solaris 9.0 • sun solaris 10.0 • sun sunos 5.8 • sun jdk 1.5.0 • sun jre 1.3.1 • sun jre 1.3.1 2 • sun jre 1.3.1 03 • sun jre 1.3.1 04 • sun jre 1.3.1 05 • sun jre 1.3.1 06 • sun jre 1.3.1 07 • sun jre 1.3.1 08 • sun jre 1.3.1 09 • sun jre 1.3.1 10 • sun jre 1.3.1 11 • sun jre 1.3.1 12 • sun jre 1.3.1 13 • sun jre 1.3.1 14 • sun jre 1.3.1 15 • sun jre 1.3.1 16 • sun jre 1.3.1 17 • sun jre 1.3.1 18 • sun jre 1.3.1 19 • sun jre 1.4.2 • sun jre 1.4.2 1 • sun jre 1.4.2 2 • sun jre 1.4.2 3 • sun jre 1.4.2 4 • sun jre 1.4.2 5 • sun jre 1.4.2 6 • sun jre 1.4.2 7 • sun jre 1.4.2 8 • sun jre 1.4.2 9 • sun jre 1.4.2 10 • sun jre 1.4.2 11 • sun jre 1.4.2 12 • sun jre 1.5.0 • sun sdk 1.3.1 • sun sdk 1.3.1 01 • sun sdk 1.3.1 01a • sun sdk 1.3.1 02 • sun sdk 1.3.1 03 • sun sdk 1.3.1 04 • sun sdk 1.3.1 05 • sun sdk 1.3.1 06 • sun sdk 1.3.1 07 • sun sdk 1.3.1 08 • sun sdk 1.3.1 09 • sun sdk 1.3.1 10 • sun sdk 1.3.1 11 • sun sdk 1.3.1 12 • sun sdk 1.3.1 13 • sun sdk 1.3.1 14 • sun sdk 1.3.1 15 • sun sdk 1.3.1 16 • sun sdk 1.3.1 17 • sun sdk 1.3.1 18 … and 18 more

References