Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and previous versions, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and previous versions; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote malicious users to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sun secure global desktop |
||
sun staroffice |
||
sun nss |
||
sun solaris 9.0 |
||
sun solaris 10.0 |
||
sun sunos 5.8 |
||
sun jdk 1.5.0 |
||
sun jre 1.4.2 |
||
sun jre 1.4.2_1 |
||
sun jre 1.4.2_2 |
||
sun jre 1.4.2_3 |
||
sun jre 1.5.0 |
||
sun jre 1.4.2_4 |
||
sun jre 1.4.2_6 |
||
sun jre 1.3.1 |
||
sun jre 1.3.1_03 |
||
sun jre 1.3.1_10 |
||
sun jre 1.3.1_12 |
||
sun jre 1.3.1_17 |
||
sun jre 1.3.1_19 |
||
sun jre 1.3.1_05 |
||
sun jre 1.3.1_06 |
||
sun jre 1.3.1_07 |
||
sun jre 1.3.1_08 |
||
sun jre 1.4.2_8 |
||
sun jre 1.4.2_9 |
||
sun jre 1.4.2_10 |
||
sun jre 1.4.2_11 |
||
sun jre 1.4.2_12 |
||
sun jre 1.3.1_13 |
||
sun jre 1.3.1_14 |
||
sun jre 1.3.1_15 |
||
sun jre 1.3.1_16 |
||
sun jre 1.4.2_5 |
||
sun jre 1.4.2_7 |
||
sun jre 1.3.1_2 |
||
sun jre 1.3.1_04 |
||
sun jre 1.3.1_09 |
||
sun jre 1.3.1_11 |
||
sun jre 1.3.1_18 |
||
sun sdk 1.4.2 |
||
sun sdk 1.4.2_5 |
||
sun sdk 1.4.2_7 |
||
sun sdk 1.3.1_01 |
||
sun sdk 1.3.1_02 |
||
sun sdk 1.3.1_07 |
||
sun sdk 1.3.1_09 |
||
sun sdk 1.3.1_11 |
||
sun sdk 1.3.1_16 |
||
sun sdk 1.3.1_18 |
||
sun sdk 1.4.2_1 |
||
sun sdk 1.4.2_2 |
||
sun sdk 1.4.2_3 |
||
sun sdk 1.4.2_4 |
||
sun sdk 1.3.1_03 |
||
sun sdk 1.3.1_04 |
||
sun sdk 1.3.1_05 |
||
sun sdk 1.3.1_06 |
||
sun sdk 1.4.2_9 |
||
sun sdk 1.4.2_10 |
||
sun sdk 1.4.2_11 |
||
sun sdk 1.4.2_12 |
||
sun sdk 1.3.1_12 |
||
sun sdk 1.3.1_13 |
||
sun sdk 1.3.1_14 |
||
sun sdk 1.3.1_15 |
||
sun sdk 1.4.2_6 |
||
sun sdk 1.4.2_8 |
||
sun sdk 1.3.1 |
||
sun sdk 1.3.1_01a |
||
sun sdk 1.3.1_08 |
||
sun sdk 1.3.1_10 |
||
sun sdk 1.3.1_17 |
||
sun sdk 1.3.1_19 |
||
sun jsse 1.0.3 |
||
sun jsse 1.0.3_01 |
||
sun jsse 1.0.3_02 |
||
sun jsse 1.0.3_03 |
Vulmon