Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

Ubuntu 5.04 LTS USN-348-1 Critical: GnuTLS Signature Forgery

ubuntu
Calendar Grey October 16, 2006
Scroller Ubuntu
A critical vulnerability in the GnuTLS library on Ubuntu allows signature forgery without the private key. Users should update configurations and audit systems.
The GnuTLS library did not sufficiently check the padding of PKCS #1 v1.5 signatures if the exponent of the public key is 3 (which is widely used for CAs)

Summary

Topics%20covered

Topics Covered

security advisory critical doS ubuntu linux signature forgery gnuTLS

Update Instructions

References

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-348-1 September 18, 2006

Topics%20covered

Topics Covered

security advisory critical doS ubuntu linux signature forgery gnuTLS

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.