CVE-2006-5179: Intoto Igateway SSL-VPN

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Affected products

  • Intoto Igateway SSL-VPN: any version
  • Intoto Igateway VPN: any version

Published 2006-10-10. Last modified 2026-06-16.