diff options
| -rw-r--r-- | security/vuxml/vuln.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 4a49e46fad9d..8da25f9e56a8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,41 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="64bf6234-520d-11db-8f1a-000a48049292"> + <topic>gnutls -- RSA Signature Forgery Vulnerability</topic> + <affects> + <package> + <name>gnutls</name> + <name>gnutls-devel</name> + <range><lt>1.4.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/21937"> + <p>A vulnerability has been reported in GnuTLS, which can be + exploited by malicious people to bypass certain security + restrictions.</p> + <p>The vulnerability is caused due to an error in the + verification of certain signatures. If a RSA key with + exponent 3 is used, it may be possible to forge PKCS #1 + v1.5 signatures signed with that key.</p> + </blockquote> + </body> + </description> + <references> + <bid>20027</bid> + <cvename>CVE-2006-4790</cvename> + <url>http://secunia.com/advisories/21937</url> + <url>http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html</url> + </references> + <dates> + <discovery>2006-09-08</discovery> + <entry>2006-10-02</entry> + </dates> + </vuln> + <vuln vid="350a5bd9-520b-11db-8f1a-000a48049292"> <topic>MT -- Search Unspecified XSS</topic> <affects> |