CVE-2006-4339

Published: Sep 5, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.

Affected (45)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Up to 0.9.7
Openssl Openssl	Version 0.9.1c
Openssl Openssl	Version 0.9.2b
Openssl Openssl	Version 0.9.3
Openssl Openssl	Version 0.9.3a
Openssl Openssl	Version 0.9.4
Openssl Openssl	Version 0.9.5
Openssl Openssl	Version 0.9.5 beta1
Openssl Openssl	Version 0.9.5 beta2
Openssl Openssl	Version 0.9.5a
Openssl Openssl	Version 0.9.5a beta1
Openssl Openssl	Version 0.9.5a beta2
Openssl Openssl	Version 0.9.6
Openssl Openssl	Version 0.9.6 beta1
Openssl Openssl	Version 0.9.6 beta2
Openssl Openssl	Version 0.9.6 beta3
Openssl Openssl	Version 0.9.6a
Openssl Openssl	Version 0.9.6a beta1
Openssl Openssl	Version 0.9.6a beta2
Openssl Openssl	Version 0.9.6a beta3
Openssl Openssl	Version 0.9.6b
Openssl Openssl	Version 0.9.6c
Openssl Openssl	Version 0.9.6d
Openssl Openssl	Version 0.9.6e
Openssl Openssl	Version 0.9.6f
Openssl Openssl	Version 0.9.6g
Openssl Openssl	Version 0.9.6h
Openssl Openssl	Version 0.9.6i
Openssl Openssl	Version 0.9.6j
Openssl Openssl	Version 0.9.6k
Openssl Openssl	Version 0.9.6l
Openssl Openssl	Version 0.9.6m
Openssl Openssl	Version 0.9.7a
Openssl Openssl	Version 0.9.7b
Openssl Openssl	Version 0.9.7c
Openssl Openssl	Version 0.9.7d
Openssl Openssl	Version 0.9.7e
Openssl Openssl	Version 0.9.7f
Openssl Openssl	Version 0.9.7g
Openssl Openssl	Version 0.9.7h
Openssl Openssl	Version 0.9.7i
Openssl Openssl	Version 0.9.7j
Openssl Openssl	Version 0.9.8
Openssl Openssl	Version 0.9.8a
Openssl Openssl	Version 0.9.8b

Related CWEs

CWE-310

References (400)

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://dev2dev.bea.com/pub/advisory/238

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=304829

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=307177

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771

Source: secalert@redhat.com

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540

Source: secalert@redhat.com

http://jvn.jp/en/jp/JVN51615542/index.html

Source: secalert@redhat.com

http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html

Source: secalert@redhat.com

http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: secalert@redhat.com

http://marc.info/?l=bind-announce&m=116253119512445&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=130497311408250&w=2

Source: secalert@redhat.com

http://openvpn.net/changelog.html

Source: secalert@redhat.com

http://secunia.com/advisories/21709

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21767

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21776

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21778

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21785

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21791

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21812

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21823

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21846

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21852

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21870

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21873

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21906

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21927

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21930

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21982

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22036

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22044

Source: secalert@redhat.com

http://secunia.com/advisories/22066

Source: secalert@redhat.com

http://secunia.com/advisories/22161

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22226

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22232

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22259

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22260

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22284

Source: secalert@redhat.com

http://secunia.com/advisories/22325

Source: secalert@redhat.com

http://secunia.com/advisories/22446

Source: secalert@redhat.com

http://secunia.com/advisories/22509

Source: secalert@redhat.com

http://secunia.com/advisories/22513

Source: secalert@redhat.com

http://secunia.com/advisories/22523

Source: secalert@redhat.com

http://secunia.com/advisories/22545

Source: secalert@redhat.com

http://secunia.com/advisories/22585

Source: secalert@redhat.com

http://secunia.com/advisories/22671

Source: secalert@redhat.com

http://secunia.com/advisories/22689

Source: secalert@redhat.com

http://secunia.com/advisories/22711

Source: secalert@redhat.com

http://secunia.com/advisories/22733

Source: secalert@redhat.com

http://secunia.com/advisories/22758

Source: secalert@redhat.com

http://secunia.com/advisories/22799

Source: secalert@redhat.com

http://secunia.com/advisories/22932

Source: secalert@redhat.com

http://secunia.com/advisories/22934

Source: secalert@redhat.com

http://secunia.com/advisories/22936

Source: secalert@redhat.com

http://secunia.com/advisories/22937

Source: secalert@redhat.com

http://secunia.com/advisories/22938

Source: secalert@redhat.com

http://secunia.com/advisories/22939

Source: secalert@redhat.com

http://secunia.com/advisories/22940

Source: secalert@redhat.com

http://secunia.com/advisories/22948

Source: secalert@redhat.com

http://secunia.com/advisories/22949

Source: secalert@redhat.com

http://secunia.com/advisories/23155

Source: secalert@redhat.com

http://secunia.com/advisories/23455

Source: secalert@redhat.com

http://secunia.com/advisories/23680

Source: secalert@redhat.com

http://secunia.com/advisories/23794

Source: secalert@redhat.com

http://secunia.com/advisories/23841

Source: secalert@redhat.com

http://secunia.com/advisories/23915

Source: secalert@redhat.com

http://secunia.com/advisories/24099

Source: secalert@redhat.com

http://secunia.com/advisories/24930

Source: secalert@redhat.com

http://secunia.com/advisories/24950

Source: secalert@redhat.com

http://secunia.com/advisories/25284

Source: secalert@redhat.com

http://secunia.com/advisories/25399

Source: secalert@redhat.com

http://secunia.com/advisories/25649

Source: secalert@redhat.com

http://secunia.com/advisories/26329

Source: secalert@redhat.com

http://secunia.com/advisories/26893

Source: secalert@redhat.com

http://secunia.com/advisories/28115

Source: secalert@redhat.com

http://secunia.com/advisories/31492

Source: secalert@redhat.com

http://secunia.com/advisories/38567

Source: secalert@redhat.com

http://secunia.com/advisories/38568

Source: secalert@redhat.com

http://secunia.com/advisories/41818

Source: secalert@redhat.com

http://secunia.com/advisories/60799

Source: secalert@redhat.com

http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200609-05.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200609-18.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016791

Source: secalert@redhat.com

http://securitytracker.com/id?1017522

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1

Source: secalert@redhat.com

http://support.attachmate.com/techdocs/2127.html

Source: secalert@redhat.com

http://support.attachmate.com/techdocs/2128.html

Source: secalert@redhat.com

http://support.attachmate.com/techdocs/2137.html

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm

Source: secalert@redhat.com

http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf

Source: secalert@redhat.com

http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html

Source: secalert@redhat.com

http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html

Source: secalert@redhat.com

http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1174

Source: secalert@redhat.com

Patch

http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml

Source: secalert@redhat.com

http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/845620

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:161

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:177

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:178

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:207

Source: secalert@redhat.com

http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_26_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_55_ssl.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_61_opera.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html

Source: secalert@redhat.com

http://www.openbsd.org/errata.html

Source: secalert@redhat.com

http://www.openoffice.org/security/cves/CVE-2006-4339.html

Source: secalert@redhat.com

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html

Source: secalert@redhat.com

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html

Source: secalert@redhat.com

http://www.openssl.org/news/secadv_20060905.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.opera.com/support/search/supsearch.dml?index=845

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html

Source: secalert@redhat.com

http://www.osvdb.org/28549

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0661.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0062.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0072.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0073.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0629.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/445231/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/445822/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/450327/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/456546/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/19849

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/22083

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28276

Source: secalert@redhat.com

http://www.serv-u.com/releasenotes/

Source: secalert@redhat.com

http://www.sybase.com/detail?id=1047991

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-339-1

Source: secalert@redhat.com

Patch

http://www.us-cert.gov/cas/techalerts/TA06-333A.html

Source: secalert@redhat.com

US Government Resource

http://www.us.debian.org/security/2006/dsa-1173

Source: secalert@redhat.com

Patch

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: secalert@redhat.com

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: secalert@redhat.com

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: secalert@redhat.com

http://www.vmware.com/support/server/doc/releasenotes_server.html

Source: secalert@redhat.com

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: secalert@redhat.com

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3453

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3566

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3730

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3748

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3793

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3899

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3936

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4205

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4206

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4207

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4216

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4327

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4329

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4366

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4417

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4586

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4744

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4750

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/5146

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0254

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0343

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1401

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1815

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1945

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2163

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2315

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2783

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4224

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0905/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0366

Source: secalert@redhat.com

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742

Source: secalert@redhat.com

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28755

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1633

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-616

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656

Source: secalert@redhat.com

https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html

Source: secalert@redhat.com

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (unsafe URL)