Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents libike from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Solaris 远程攻击漏洞
Vulnerability Description
当使用带有exponent 3的RSA key时，被Sun Solaris 9和10中的in.iked，elfsign和kcfd使用的libike库会在生成信息前移除PKCS-1填充，这使得远程攻击者可以伪造一个PKCS #1 v1.5署名。该署名是由RSA key签署的，并且会阻止libike正确的校验使用PKCS #1的X.509证书和其他证书。该漏洞与CVE-2006-4339相似。
CVSS Information
N/A
Vulnerability Type
N/A