Is CVE-2006-5179 being actively exploited?

CVE-2006-5179 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2006-5179?

CVE-2006-5179 has a CVSS 2.0 base score of 5.4 (MEDIUM).

CVE-2006-5179

MEDIUM · CVSS 5.4EPSS 0.8%EU EUVD

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Key facts

CVSS score: 5.4 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
EPSS score: 0.8% (56th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2006-5164)
Published: October 10, 2006
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2006-5164 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

intoto / igateway ssl-vpn
intoto / igateway vpn

References

http://secunia.com/advisories/22206(Vendor Advisory)
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en(Vendor Advisory)
http://www.vupen.com/english/advisories/2006/3859

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain