Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2930 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26997 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102321-1 - http://securitytracker.com/id?1016247 - http://secunia.com/advisories/20518 - http://www.vupen.com/english/ad
102321-1 - http://securitytracker.com/id?1016247 - http://secunia.com/advisories/20518 - http://www.vupen.com/english/advisories/2006/2215
CVE ID: CVE-2006-2931 State: PUBLISHED Published: 2006-06-21T19:00:00 Last Updated: 2024-08-07T18:06:27.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-43/advisory/ - http://www.vupen.com/english/advisories/2006/2348 - http://www.securityfocus.com/archive/1/437183/100/200/threaded - http://www.osvdb.org/26465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 - http://se
3/100/200/threaded - http://www.osvdb.org/26465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 - http://secunia.com/advisories/20362 - http://securitytracker.com/id?1016311
CVE ID: CVE-2006-2932 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T18:06:27.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0617.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11410 - http://secunia.com/advisories/21605 - http://www.securityfocus.com/bid/19664 -
on/oval%3Aorg.mitre.oval%3Adef%3A11410 - http://secunia.com/advisories/21605 - http://www.securityfocus.com/bid/19664 - http://secunia.com/advisories/22174 - http://www.osvdb.org/28120 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm
CVE ID: CVE-2006-2933 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:06:27.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21203 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177755 - http://www.redhat.com/support/errata/RHSA-2006-0576.html - http://securitytracker.com/id?1016571 - https://oval.cisecurity.org/repository/search/defi
/errata/RHSA-2006-0576.html - http://securitytracker.com/id?1016571 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10535 - http://www.securityfocus.com/bid/19152
CVE ID: CVE-2006-2934 State: PUBLISHED Published: 2006-06-30T21:00:00 Last Updated: 2024-08-07T18:06:27.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-331-1 - http://www.osvdb.org/26963 - http://secunia.com/advisories/21934 - http://secunia.com/advisories/20917 - http://ww
1-1 - http://www.osvdb.org/26963 - http://secunia.com/advisories/21934 - http://secunia.com/advisories/20917 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.securityfocus.com/archive/1/439483/100/100/threaded - http://secunia.com/advisories/21298 - http://www.securityfocus.com/archive/1/439610/100/100/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23 - http://secunia.com/adv
dvisories?name=MDKSA-2006:151 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23 - http://secunia.com/advisories/21614 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://www.kb.cert.org/vuls/id/717844 - http://secunia.com/advisories/21465 - http://www.ubuntu.com/usn/usn-346-1 - http://secunia.com/advisories/21498 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/20986 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10932 - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=9c48e1ea8cf8800cc5e2d39ccbb8b5
- http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9 - http://www.securityfocus.com/bid/18755 - http://www.vupen.com/english/advisories/2006/2623 - https://issues.rpath.com/browse/RPL-488 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2935 State: PUBLISHED Published: 2006-07-05T18:00:00 Last Updated: 2024-08-07T18:06:27.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-331-1 - http://secunia.com/advisories/21934 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.redhat.com/support/errata/R
ies/21934 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.redhat.com/support/errata/RHSA-2007-0012.html - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://bugzilla.kernel.org/show_bug.cgi?id=2966 - http://secunia.com/advisories/21298 - http://secunia.com/advisories/23788 - http://secunia.com/advisories/21695 - http://secunia.com/advisories/21605 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.debian.org/security/2006/dsa-1183 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.redhat.com/support/errata/RHSA-2007-0013.html - http://www.mandriva.com/security/advisories?name=MDKSA-2
50 - http://www.redhat.com/support/errata/RHSA-2007-0013.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 - http://secunia.com/advisories/22082 - http://secunia.com/advisories/21614 - http://www.novell.com/linux/security/advisories/2006_64_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27579 - http://secunia.com/advisories/22174 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886 - http://secunia.com/advisories/24288 - http://www.vupen.com/english/advisories/2006/2680 - http://secunia.com/advisories/22822 - http://secunia.com/advisories/23064 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670 - ht
dvisories/22822 - http://secunia.com/advisories/23064 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670 - http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm - http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm - http://www.ubuntu.com/usn/usn-346-1 - http://www.securityfocus.com/bid/18847 - http://secunia.com/advisories/22497 - http://secunia.com/advisories/21498 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://www.redhat.com/support/errata/RHSA-2006-0710.html - https://issues.rpath.com/browse/RPL-611 - http://www.securityfocus.com/archive/1/444887/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_49_kernel.html - http
tyfocus.com/archive/1/444887/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_49_kernel.html - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2936 State: PUBLISHED Published: 2006-07-10T19:00:00 Last Updated: 2024-08-07T18:06:27.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656 - http://secunia.c
t%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656 - http://secunia.com/advisories/20703 - http://www.ubuntu.com/usn/usn-331-1 - http://secunia.com/advisories/21934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27807 - http://www.securityfocus.com/bid/19033 - http://www.osvdb.org/27119 - http://www.vupen.com/english/advisories/2006/2841 - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/21298 - http://secunia.com/advisories/21057 - http://secunia.com/advisories/21605 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
//bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.novell.com/linux/security/advisories/2007_21_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 - http://secunia.com/advisories/25226 - http://secunia.com/advisories/21614 - http://secunia.com/advisories/25683 - http://secunia.com/advisories/22174 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265 - http://www.ubuntu.com/usn/usn-346-1 - http://www.novell.com/linux/security/advisories/2007_18_kernel.html - http://secunia.com/advisories/24547 - http://support.avaya.com/elmodocs2/security/ASA-2
advisories/2007_18_kernel.html - http://secunia.com/advisories/24547 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://www.novell.com/linux/security/advisories/2007_30_kernel.html - http://www.novell.com/linux/security/advisories/2007_35_kernel.html - http://secunia.com/advisories/22093 - http://www.securityfocus.com/archive/1/440300/100/0/threaded - http://www.debian.org/security/2006/dsa-1184
CVE ID: CVE-2006-2937 State: PUBLISHED Published: 2006-09-28T18:00:00 Last Updated: 2024-08-07T18:06:27.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 - http://secunia.com/advisories/22212 - http://support.attachmate.com/techdocs/2374.html - http://www.vupen.com/english/advisories/2006/4750 - http://www.vmware.com/support/esx
ttachmate.com/techdocs/2374.html - http://www.vupen.com/english/advisories/2006/4750 - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://secunia.com/advisories/23915 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://securitytracker.com/id?1016943 - http://secunia.com/advisories/23038 - http://www.trustix.org/errata/2006/0054 - http://secunia.com/advisories/23309 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://www.ubuntu.com/usn/usn-353-1 - http://sourceforge.net/project/shownotes.php?
n.com/english/advisories/2006/4401 - http://www.ubuntu.com/usn/usn-353-1 - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://secunia.com/advisories/22116 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - http://secunia.com/advisories/22166 - http://www.redhat.com/support/errata/RHSA-2006-0695.html - http://secunia.com/advisories/23340 - http://secunia.com/advisories/22385 - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22758 - http://secunia.com/advisories/22487 -
linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22758 - http://secunia.com/advisories/22487 - http://www.novell.com/linux/security/advisories/2006_58_openssl.html - http://secunia.com/advisories/22772 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://secunia.com/advisories/31531 - http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf - http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc - http://secunia.com/advisories/22165 - http://docs.info.apple.com/article.html?artnum=304829 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html - http://marc.info/?l=bugtraq&m=1304973114082
p://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/22220 - http://secunia.com/advisories/23680 - http://openvpn.net/changelog.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://secunia.com/advisories/25889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29228 - http://www.vupen.com/english/advisories/2006/4036 - http://www.vupen.com/english/advisories/2006/4019 - http://openbsd.org/errata.html#openssl2 - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://secunia.com/advisories/30124 - http://secunia.com/advisories/22626 - http:/
ort/ace2/doc/releasenotes_ace2.html - http://secunia.com/advisories/30124 - http://secunia.com/advisories/22626 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 - http://secunia.com/advisories/23351 - http://www.vupen.com/english/advisories/2006/3869 - http://secunia.com/advisories/22671 - http://www.securityfocus.com/bid/20248 - http://secunia.com/advisories/22544 - http://secunia.com/advisories/22298 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/22130 - http://secunia.com/advisories/31492 - http://www.vupen.com/english/advisories/2006/4329 - http://secunia.com/advisories/22284 - http://secunia.com/advisories/24930 - h
w.vupen.com/english/advisories/2006/4329 - http://secunia.com/advisories/22284 - http://secunia.com/advisories/24930 - http://www.vupen.com/english/advisories/2006/4327 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://security.gentoo.org/glsa/glsa-200610-11.xml - http://secunia.com/advisories/23131 - http://issues.rpath.com/browse/RPL-613 - http://secunia.com/advisories/26329 - http://secunia.com/advisories/22260 - http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf - http://www.vupen.com/english/advisories/2007/0343 - http://www.vupen.com/english/advisories/2006/3860 - http://secunia.com/advisories/23280 - http://www.securityfocus.com/archive/1/447318/
.com/english/advisories/2006/3860 - http://secunia.com/advisories/23280 - http://www.securityfocus.com/archive/1/447318/100/0/threaded - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm - http://www.f-secure.com/security/fsc-2006-6.shtml - http://www.vupen.com/english/advisories/2006/4264 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/22193 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html - http://www.vupen.com/english/advisories/2008/2396 - http://www.vupen.com/english/advisories/
esx-202-200612-patch.html - http://www.vupen.com/english/advisories/2008/2396 - http://www.vupen.com/english/advisories/2006/4761 - http://secunia.com/advisories/23155 - http://secunia.com/advisories/22799 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - http://www.vupen.com/english/advisories/2006/4417 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.serv-u.com/releasenotes/ - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - http://www.osvdb.org/29260 - http://marc.info/?l=bin
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - http://www.osvdb.org/29260 - http://marc.info/?l=bind-announce&m=116253119512445&w=2 - http://secunia.com/advisories/22094 - http://secunia.com/advisories/22186 - http://www.openssl.org/news/secadv_20060928.txt - http://kolab.org/security/kolab-vendor-notice-11.txt - http://www.vupen.com/english/advisories/2007/2315 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.securityfocus.com/archive/1/489739/100/0/threaded - http://secunia.com/advisories/22216 - http://www.vupen.com/english/advisories/2006/3820 - http://lists.vmware.com/piper
http://secunia.com/advisories/22216 - http://www.vupen.com/english/advisories/2006/3820 - http://lists.vmware.com/pipermail/security-announce/2008/000008.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 - http://www.kb.cert.org/vuls/id/247744 - http://www.vupen.com/english/advisories/2008/0905/references - http://www.vupen.com/english/advisories/2007/1401 - ftp://ftp.netbs
.vupen.com/english/advisories/2008/0905/references - http://www.vupen.com/english/advisories/2007/1401 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc - http://www.vmware.com/security/advisories/VMSA-2008-0005.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://www.securityfocus.com/archive/1/456546/100/200/threaded - http://www.securityfocus.com/archive/1/447393/100/0/threaded - http://www.vupen.com/english/advisories/2006/3936 - http://www.vupen.com/english/advisories/2006/4980 - http://secunia.com/advisories/22240 - http://secunia.com/advisories/22330 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
om/advisories/22240 - http://secunia.com/advisories/22330 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.debian.org/security/2006/dsa-1185 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf - http://secunia.com/advisories/22207 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 - http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html - http://www.vupen.com/english/advisories/2006/3902 - http://www.vupen.com/english/advisories
ponse09186a008077af1b.html - http://www.vupen.com/english/advisories/2006/3902 - http://www.vupen.com/english/advisories/2007/2783 - http://secunia.com/advisories/22259 - http://secunia.com/advisories/22460 - http://secunia.com/advisories/22172 - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - http://www.securityfocus.com/bid/28276 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://secunia.com/advisories/24950
CVE ID: CVE-2006-2938 State: REJECTED Published: 2007-11-27T00:00:00Z Last Updated: 2024-09-16T22:16:10.900Z Description: No description available.
CVE ID: CVE-2006-2939 State: REJECTED Published: 2007-11-27T00:00:00Z Last Updated: 2024-09-17T01:20:34.685Z Description: No description available.
CVE ID: CVE-2006-2940 State: PUBLISHED Published: 2006-09-28T18:00:00 Last Updated: 2024-08-07T18:06:27.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 - http://secunia.com/advisories/22212 - http://www.ubuntu.com/usn/usn-353-2 - http
curity/advisories?name=MDKSA-2006:172 - http://secunia.com/advisories/22212 - http://www.ubuntu.com/usn/usn-353-2 - http://support.attachmate.com/techdocs/2374.html - http://www.vupen.com/english/advisories/2006/4750 - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en - http://secunia.com/advisories/23915 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://securitytracker.com/id?1016943 - http://secunia.com/advisories/23038 - http://www.trustix.org/errata/2006/0054 - http://www.debian.org/security/2006/
3 - http://secunia.com/advisories/23038 - http://www.trustix.org/errata/2006/0054 - http://www.debian.org/security/2006/dsa-1195 - http://secunia.com/advisories/23309 - http://secunia.com/advisories/26893 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://www.ubuntu.com/usn/usn-353-1 - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://secunia.com/advisories/22116 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - http://secunia.com/advisories/
2/security/ASA-2006-260.htm - http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - http://secunia.com/advisories/22166 - http://www.redhat.com/support/errata/RHSA-2006-0695.html - http://secunia.com/advisories/23340 - http://secunia.com/advisories/22385 - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22758 - http://secunia.com/advisories/22487 - http://www.novell.com/linux/security/advisories/2006_58_openssl.html - http://secunia.com/advisories/22772 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://secunia.com/advisories/31531 - http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf - ht