• info
• discussion
• exploit
• solution
• references

GNUTLS PKCS RSA Signature Forgery Vulnerability

Solution:
The vendor has addressed this issue in version 1.4.3 and later.

Please see the referenced advisories for more information.


GNU GnuTLS 1.0

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.1

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.14

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.15

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.16

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2


• Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_amd64.deb


• Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_i386.deb


• Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_powerpc.deb


• Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_sparc.deb


• Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_amd64.deb


• Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_i386.deb


• Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_powerpc.deb


• Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_amd64.deb


• Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_i386.deb


• Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_powerpc.deb


• Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_sparc.deb


• Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_amd64.deb


• Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_i386.deb


• Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_powerpc.deb


• Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_sparc.deb


• Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_amd64.deb


• Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_i386.deb


• Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_powerpc.deb


• Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_sparc.deb


• Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_amd64.deb


• Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_i386.deb


• Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_powerpc.deb


• Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_sparc.deb


• Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_amd64.deb


• Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_i386.deb


• Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_powerpc.deb


• Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_sparc.deb


• Ubuntu libgnutls11_1.0.16-13ubuntu0.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.3_amd64.deb


• Ubuntu libgnutls11_1.0.16-13ubuntu0.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.3_i386.deb


• Ubuntu libgnutls11_1.0.16-14ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_i386.deb


• Ubuntu libgnutls11_1.0.16-14ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_sparc.deb

GNU GnuTLS 1.0.17

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.2

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.25

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.3

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.4

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.6

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.7

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.8

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.1

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.10

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.2

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.3

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.4

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2


• Trustix gnutls-1.2.4-4tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix gnutls-devel-1.2.4-4tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates

GNU GnuTLS 1.2.5

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.9

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2


• Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_amd64.deb


• Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_i386.deb


• Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_powerpc.deb


• Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_sparc.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_amd64.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_i386.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_powerpc.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_sparc.deb


• Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_amd64.deb


• Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_i386.deb


• Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_sparc.deb


• Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_amd64.deb


• Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_i386.deb


• Ubuntu libgnutls11_1.0.16-14ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_amd64.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_amd64.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_i386.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_powerpc.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_sparc.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_amd64.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_i386.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_powerpc.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_sparc.deb

GNU GnuTLS 1.3

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.1

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.3

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.4

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.4

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.4.2

• GNU gnutls-1.4.4.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2