Vulnerabilities > SSH > Tectia Manager > 1.4

DATE CVE VULNERABILITY TITLE RISK
2006-10-24 CVE-2006-5484 Remote Security vulnerability in Tectia Client
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
network
low complexity
ssh
5.0
2006-08-23 CVE-2006-4316 Local Privilege Escalation vulnerability in SSH Tectia Manager Agent Process
SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action is selected from the Management server GUI, which causes the agent to locate the pathname of the user's program and restart it with root privileges.
local
low complexity
ssh
7.2
2006-08-23 CVE-2006-4315 Privilege Escalation vulnerability in SSH Tectia Windows Path Specification
Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under "Program Files" or its subdirectories.
local
low complexity
ssh
7.2