Description
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2006-4339 ↗
- dev2dev.bea.com/pub/advisory/238 ↗
- docs.info.apple.com/article.html ↗
- docs.info.apple.com/article.html ↗
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp ↗
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp ↗
- itrc.hp.com/service/cki/docDisplay.do ↗
- jvn.jp/en/jp/JVN51615542/index.html ↗
- jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html ↗
- lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html ↗
- lists.apple.com/archives/security-announce/2006/Nov/msg00001.html ↗
- lists.vmware.com/pipermail/security-announce/2008/000008.html ↗
- marc.info/ ↗
- marc.info/ ↗
- openvpn.net/changelog.html ↗
- secunia.com/advisories/21709 ↗
- secunia.com/advisories/21767 ↗
- secunia.com/advisories/21776 ↗
- secunia.com/advisories/21778 ↗
- secunia.com/advisories/21785 ↗
- secunia.com/advisories/21791 ↗
- secunia.com/advisories/21812 ↗
- secunia.com/advisories/21823 ↗
- secunia.com/advisories/21846 ↗
- secunia.com/advisories/21852 ↗
- secunia.com/advisories/21870 ↗
- secunia.com/advisories/21873 ↗
- secunia.com/advisories/21906 ↗
- secunia.com/advisories/21927 ↗
- secunia.com/advisories/21930 ↗
- secunia.com/advisories/21982 ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.