Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNUTLS PKCS RSA签名伪造漏洞
Vulnerability Description
GnuTLS before 1.4.4中的verify.c，如果使用具有指数3的RSA密钥，在生成杂凑时未适当处理digestAlgorithm.parameters字段中超出的数据，这可让远程攻击者伪造由RSA密钥签署的PKCS #1 v1.5签名，并阻止GnuTLS正确验证X.509和使用PKCS的其他证书。
CVSS Information
N/A
Vulnerability Type
N/A