CVE-2006-3968 Weak cryptography in n/a
The Sun Solaris crypto provider fails to correctly verify DSA signatures, allowing attackers to bypass data integrity checks on affected platforms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-3968?
CVE-2006-3968 is a medium-severity vulnerability in Sun Solaris, published on 1 Aug 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified.
Which versions are affected by CVE-2006-3968?
It affects 1 product.
Products include Sun Solaris.
How do I fix CVE-2006-3968?
No fix has been published for CVE-2006-3968 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-3968 being exploited?
There is no known exploitation of CVE-2006-3968 in the wild and no public exploit code.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-qmxf-pxcp-h7f3.