First published: Mon Oct 09 2006(Updated: )
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun Secure Global Desktop | ||
Sun Nss | ||
Sun StarOffice | ||
Sun SunOS | =5.8 | |
Sun Solaris | =9.0 | |
Sun Solaris | =10.0 | |
Sun JDK | =1.5.0-update3 | |
Sun JDK | =1.5.0-update6 | |
Sun JDK | =1.5.0-update1 | |
Sun JDK | =1.5.0-update4 | |
Sun JDK | =1.5.0-update7 | |
Sun JDK | =1.5.0-update5 | |
Sun JDK | =1.5.0-update7_b03 | |
Sun JDK | =1.5.0-update2 | |
Sun JDK | =1.5.0-update8 | |
Sun JDK | =1.5.0 | |
Sun JRE | =1.4.2_7 | |
Sun JRE | =1.3.1_10 | |
Sun JRE | =1.3.1_06 | |
Sun JRE | =1.4.2_4 | |
Sun JRE | =1.4.2_2 | |
Sun JRE | =1.5.0-update2 | |
Sun JRE | =1.3.1_2 | |
Sun JRE | =1.4.2_1 | |
Sun JRE | =1.4.2_8 | |
Sun JRE | =1.3.1_16 | |
Sun JRE | =1.3.1_19 | |
Sun JRE | =1.5.0-update8 | |
Sun JRE | =1.3.1_11 | |
Sun JRE | =1.3.1_17 | |
Sun JRE | =1.4.2_12 | |
Sun JRE | =1.3.1_12 | |
Sun JRE | =1.3.1_03 | |
Sun JRE | =1.3.1_14 | |
Sun JRE | =1.3.1_08 | |
Sun JRE | =1.5.0-update7 | |
Sun JRE | =1.5.0-update3 | |
Sun JRE | =1.3.1_07 | |
Sun JRE | =1.3.1_05 | |
Sun JRE | =1.4.2_10 | |
Sun JRE | =1.5.0-update5 | |
Sun JRE | =1.4.2_9 | |
Sun JRE | =1.5.0-update6 | |
Sun JRE | =1.3.1_13 | |
Sun JRE | =1.3.1_04 | |
Sun JRE | =1.3.1_09 | |
Sun JRE | =1.4.2_11 | |
Sun JRE | =1.5.0-update1 | |
Sun JRE | =1.3.1_18 | |
Sun JRE | =1.3.1_15 | |
Sun JRE | =1.4.2_3 | |
Sun JRE | =1.5.0-update4 | |
Sun JRE | =1.4.2_5 | |
Sun JRE | =1.4.2_6 | |
Sun JRE | =1.5.0 | |
Sun JRE | =1.4.2 | |
Sun JRE | =1.3.1 | |
Sun SDK | =1.3.1_03 | |
Sun SDK | =1.4.2 | |
Sun SDK | =1.3.1_19 | |
Sun SDK | =1.3.1 | |
Sun SDK | =1.3.1_08 | |
Sun SDK | =1.4.2_10 | |
Sun SDK | =1.4.2_12 | |
Sun SDK | =1.3.1_15 | |
Sun SDK | =1.4.2_6 | |
Sun SDK | =1.3.1_07 | |
Sun SDK | =1.4.2_2 | |
Sun SDK | =1.3.1_10 | |
Sun SDK | =1.4.2_5 | |
Sun SDK | =1.3.1_06 | |
Sun SDK | =1.4.2_1 | |
Sun SDK | =1.3.1_12 | |
Sun SDK | =1.4.2_4 | |
Sun SDK | =1.3.1_17 | |
Sun SDK | =1.3.1_02 | |
Sun SDK | =1.3.1_18 | |
Sun SDK | =1.3.1_01 | |
Sun SDK | =1.3.1_16 | |
Sun SDK | =1.3.1_01a | |
Sun SDK | =1.3.1_14 | |
Sun SDK | =1.4.2_7 | |
Sun SDK | =1.3.1_13 | |
Sun SDK | =1.4.2_8 | |
Sun SDK | =1.4.2_11 | |
Sun SDK | =1.3.1_09 | |
Sun SDK | =1.4.2_9 | |
Sun SDK | =1.3.1_04 | |
Sun SDK | =1.3.1_05 | |
Sun SDK | =1.4.2_3 | |
Sun SDK | =1.3.1_11 | |
Sun Jsse | =1.0.3 | |
Sun Jsse | =1.0.3_02 | |
Sun Jsse | =1.0.3_01 | |
Sun Jsse | =1.0.3_03 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.