CVE:CVE-2006-5179
CNNVD:CNNVD-200610-121
Intoto iGateway VPN和iGateway SSL-VPN允许情境依赖型攻击者通过X.509证书中带有较长(1)"public exponent"或(2)"public modulus"值的寄生公共密钥来引起拒绝服务(CPU耗竭)攻击，此种情况在使用RSA签名验证的情况下需要额外的时间进行处理。
solution:Upgrade intoto igateway_ssl-vpn to a higher version than *; Upgrade intoto igateway_vpn to a higher version than *