Secunia

A vulnerability has been reported in SSH Tectia Server, SSH Tectia Manager, and SSH Tectia Client, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an error within the verification of certain signatures. If an RSA key with exponent 3 is used, it may be possible to forge a PKCS #1 v1.5 signature signed by that key.

The vulnerability is reported in the following products:
* SSH Tectia Server prior to 5.1.1
* SSH Tectia Manager prior to 2.2.1
* SSH Tectia Server for IBM z/OS prior to 5.2.1
* SSH Tectia Client prior to 5.1.1

Solution
Update to a fixed version.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.ssh.com/documents/33/SSH_Tectia_Server_5.1.1_releasenotes.txt
http://www.ssh.com/documents/33/SSH_Tectia_Manager_2.2.1_releasenotes.txt
http://www.ssh.com/documents/33/SSH_Tectia_Server_zOS_5.2.1_releasenotes.txt
http://www.ssh.com/documents/33/SSH_Tectia_Client_5.1.1_releasenotes.txt

Deep Links
Links available in Customer Area