CVE-2006-2708

概要

参考情報

• secunia.com/advisories/20378
• securitytracker.com/id
• kb.cert.org/vuls/id/227929 · US Government Resource
• kb.cert.org/vuls/id/873409 · US Government Resource
• kb.cert.org/vuls/id/WDON-6QAK6D
• vupen.com/english/advisories/2006/2069
• exchange.xforce.ibmcloud.com/vulnerabilities/26745
• exchange.xforce.ibmcloud.com/vulnerabilities/26778

class 5 enterprise vulnerability management のその他の脆弱性

• CVE-2006-2712中 5.0Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote…
• CVE-2006-2711中 5.0Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key f…
• CVE-2006-2710中 5.0Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers w…
• CVE-2006-2709中 5.0Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) …
• CVE-2006-2707中 5.0Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could al…