CVE-2006-4339
CRITICAL
INFO
Priority: 0.46
BB Relevance:
79/100
Published: 2006-09-05
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
None
Description
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
Weakness Classification (2)
Affected Software (45)
| Vendor | Product | Version |
|---|---|---|
| openssl | openssl | < 0.9.7 |
| openssl | openssl | 0.9.1c |
| openssl | openssl | 0.9.2b |
| openssl | openssl | 0.9.3 |
| openssl | openssl | 0.9.3a |
| openssl | openssl | 0.9.4 |
| openssl | openssl | 0.9.5 |
| openssl | openssl | 0.9.5 |
| openssl | openssl | 0.9.5 |
| openssl | openssl | 0.9.5a |
| openssl | openssl | 0.9.5a |
| openssl | openssl | 0.9.5a |
| openssl | openssl | 0.9.6 |
| openssl | openssl | 0.9.6 |
| openssl | openssl | 0.9.6 |
| openssl | openssl | 0.9.6 |
| openssl | openssl | 0.9.6a |
| openssl | openssl | 0.9.6a |
| openssl | openssl | 0.9.6a |
| openssl | openssl | 0.9.6a |
| openssl | openssl | 0.9.6b |
| openssl | openssl | 0.9.6c |
| openssl | openssl | 0.9.6d |
| openssl | openssl | 0.9.6e |
| openssl | openssl | 0.9.6f |
| openssl | openssl | 0.9.6g |
| openssl | openssl | 0.9.6h |
| openssl | openssl | 0.9.6i |
| openssl | openssl | 0.9.6j |
| openssl | openssl | 0.9.6k |
Showing 30 of 45 entries
References & Advisories (208)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
Showing 25 of 208 references