Vulnerabilities > CVE-2006-5484 - Remote Security vulnerability in Tectia Client

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

ssh

NVD

Published: 2006-10-24

Updated: 2019-08-28

Summary

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339. Update to a fixed version

Vulnerable Configurations

Part	Description	Count
Application	Ssh SSH Tectia Client - SSH Tectia Client 4.0 SSH Tectia Client 4.0.1 SSH Tectia Client 4.0.3 SSH Tectia Client 4.0.4 SSH Tectia Client 4.0.5 SSH Tectia Client 4.1.1 SSH Tectia Client 4.1.5 SSH Tectia Client 4.2 SSH Tectia Client 4.2.1 SSH Tectia Client 4.3 SSH Tectia Client 4.3.1 SSH Tectia Client 4.3.1J SSH Tectia Client 4.3.2 SSH Tectia Client 4.3.2J SSH Tectia Client 4.3.3 SSH Tectia Client 4.3.4 SSH Tectia Client 4.3.5 SSH Tectia Client 4.3.6 SSH Tectia Client 4.3.7 SSH Tectia Client 4.3.8K SSH Tectia Client 4.3.9K SSH Tectia Client 4.4 SSH Tectia Client 4.4.1 SSH Tectia Client 4.4.2 SSH Tectia Client 4.4.3 SSH Tectia Client 4.4.4 SSH Tectia Client 4.4.5 SSH Tectia Client 4.4.6 SSH Tectia Client 4.4.7 SSH Tectia Client 4.4.8 SSH Tectia Client 4.4.9 SSH Tectia Client 4.4.10 SSH Tectia Client 4.4.11 SSH Tectia Client 5.0 SSH Tectia Client 5.0.0 SSH Tectia Client 5.0.0.844 SSH Tectia Client 5.0.0F SSH Tectia Client 5.0.1 SSH Tectia Client 5.0.1F SSH Tectia Client 5.0.2 SSH Tectia Client 5.0.2F SSH Tectia Client 5.0.3 SSH Tectia Client 5.0.3F SSH Tectia Client 5.1.0 SSH Tectia Connector - SSH Tectia Connector 4.0.7 SSH Tectia Connector 4.1.2 SSH Tectia Connector 4.1.3 SSH Tectia Connector 4.1.5 SSH Tectia Connector 4.2.0 SSH Tectia Connector 4.3.0 SSH Tectia Connector 4.3.4 SSH Tectia Connector 4.3.5 SSH Tectia Connector 4.4.0 SSH Tectia Connector 4.4.2 SSH Tectia Connector 4.4.4 SSH Tectia Connector 4.4.6 SSH Tectia Connector 4.4.7 SSH Tectia Connector 4.4.9 SSH Tectia Connector 4.4.10 SSH Tectia Connector 5.0 SSH Tectia Connector 5.0.0 SSH Tectia Connector 5.0.1 SSH Tectia Connector 5.0.2 SSH Tectia Connector 5.0.3 SSH Tectia Connector 5.1.0 SSH Tectia Manager - SSH Tectia Manager 1.2 SSH Tectia Manager 1.3 SSH Tectia Manager 1.4 SSH Tectia Manager 2.0 SSH Tectia Manager 2.1.2 SSH Tectia Manager 2.1.3 SSH Tectia Manager 2.2.0 SSH Tectia Server - SSH Tectia Server 4.0 SSH Tectia Server 4.0.3 SSH Tectia Server 4.0.4 SSH Tectia Server 4.0.5 SSH Tectia Server 4.0.7 SSH Tectia Server 4.1.2 SSH Tectia Server 4.1.3 SSH Tectia Server 4.1.5 SSH Tectia Server 4.2.0 SSH Tectia Server 4.2.1 SSH Tectia Server 4.2.2 SSH Tectia Server 4.3 SSH Tectia Server 4.3.0 SSH Tectia Server 4.3.1 SSH Tectia Server 4.3.2 SSH Tectia Server 4.3.3 SSH Tectia Server 4.3.4 SSH Tectia Server 4.3.5 SSH Tectia Server 4.3.6 SSH Tectia Server 4.3.7 SSH Tectia Server 4.4 SSH Tectia Server 4.4.0 SSH Tectia Server 4.4.1 SSH Tectia Server 4.4.2 SSH Tectia Server 4.4.3 SSH Tectia Server 4.4.4 SSH Tectia Server 4.4.5 SSH Tectia Server 4.4.6 SSH Tectia Server 4.4.7 SSH Tectia Server 4.4.8 SSH Tectia Server 4.4.9 SSH Tectia Server 4.4.10 SSH Tectia Server 4.4.11 SSH Tectia Server 5.0 SSH Tectia Server 5.0.0 SSH Tectia Server 5.0.0_A SSH Tectia Server 5.0.0_F SSH Tectia Server 5.0.0_T SSH Tectia Server 5.0.1 SSH Tectia Server 5.0.2 SSH Tectia Server 5.0.3 SSH Tectia Server 5.1.0	118

Summary

Vulnerable Configurations

References