{"api_version":"1","generated_at":"2026-07-23T12:45:59+00:00","cve":"CVE-2006-5179","urls":{"html":"https://cve.report/CVE-2006-5179","api":"https://cve.report/api/cve/CVE-2006-5179.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5179","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5179"},"summary":{"title":"CVE-2006-5179","description":"Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-10-10 04:06:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.4","severity":"","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/22206","name":"http://secunia.com/advisories/22206","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Intoto iGateway VPN / SSL-VPN Denial of Service Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3859","name":"http://www.vupen.com/english/advisories/2006/3859","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en","name":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"application/pdf","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5179","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5179","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5179","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"intoto","cpe5":"igateway_ssl-vpn","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"5179","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"intoto","cpe5":"igateway_vpn","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:41:05.090Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en"},{"name":"ADV-2006-3859","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/3859"},{"name":"22206","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22206"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-10-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-02-26T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en"},{"name":"ADV-2006-3859","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/3859"},{"name":"22206","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22206"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5179","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en","refsource":"MISC","url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en"},{"name":"ADV-2006-3859","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3859"},{"name":"22206","refsource":"SECUNIA","url":"http://secunia.com/advisories/22206"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5179","datePublished":"2006-10-06T00:00:00.000Z","dateReserved":"2006-10-05T00:00:00.000Z","dateUpdated":"2024-08-07T19:41:05.090Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-10-10 04:06:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intoto:igateway_ssl-vpn:*:*:*:*:*:*:*:*","matchCriteriaId":"AB142A4C-E7B6-43D8-A376-32C6A77FB7BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:intoto:igateway_vpn:*:*:*:*:*:*:*:*","matchCriteriaId":"DB91D1AA-041F-4BF2-B9FE-EFF3BC0E5266"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5179","Ordinal":"1","Title":"CVE-2006-5179","CVE":"CVE-2006-5179","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5179","Ordinal":"1","NoteData":"Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.","Type":"Description","Title":"CVE-2006-5179"},{"CveYear":"2006","CveId":"5179","Ordinal":"2","NoteData":"2006-10-05","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5179","Ordinal":"3","NoteData":"2009-02-26","Type":"Other","Title":"Modified"}]}}}