Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-4790
HistorySep 14, 2006 - 7:07 p.m.

CVE-2006-4790

2006-09-1419:07:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
55
gnutls
vulnerability
rsa key
cve-2006-4790
nvd

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.063 Low

EPSS

Percentile

93.6%

JSON

verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.

References

Related

nessus 87
ubuntucve 4
openvas 49
gentoo 3
centos 3
freebsd 3
securityvulns 4
oraclelinux 3
redhat 3
debian 3
ubuntu 2
prion 2
debiancve 4
redhatcve 1
cve 6
alpinelinux 1
osv 3
suse 3
altlinux 3
openssl 1
checkpoint_advisories 1
f5 2
slackware 2
freebsd_advisory 1
jvn 1
checkpoint_security 1
cert 1
mozilla 1
cisco 1
nessus
nessus
Mandrake Linux Security Advisory : gnutls (MDKSA-2006:166)
2007-02-18 00:00:00
FreeBSD : gnutls -- RSA Signature Forgery Vulnerability (64bf6234-520d-11db-8f1a-000a48049292)
2006-10-05 00:00:00
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 2461)
2007-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2006-4790
2006-09-14 00:00:00
CVE-2018-16152
2018-09-24 00:00:00
CVE-2006-4339
2006-09-05 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200609-15 (gnutls)
2008-09-24 00:00:00
FreeBSD Ports: gnutls, gnutls-devel
2008-09-04 00:00:00
SLES9: Security update for IBM Java2 JRE and SDK
2009-10-10 00:00:00
gentoo
gentoo
GnuTLS: RSA Signature Forgery
2006-09-26 00:00:00
OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
2006-09-07 00:00:00
Mozilla Network Security Service (NSS): RSA signature forgery
2006-10-17 00:00:00
centos
centos
gnutls security update
2006-09-14 14:44:53
openssl, openssl096b security update
2006-09-08 09:58:00
openssl, openssl095a, openssl096 security update
2006-09-11 00:52:04
freebsd
freebsd
gnutls -- RSA Signature Forgery Vulnerability
2006-09-08 00:00:00
openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3)
2006-09-06 00:00:00
opera -- RSA Signature Forgery
2006-09-18 00:00:00
securityvulns
securityvulns
[USN-348-1] GnuTLS vulnerability
2006-09-19 00:00:00
OpenSSL Security Advisory [5th September 2006] RSA Signature Forgery (CVE-2006-4339)
2006-09-05 00:00:00
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
2006-09-15 00:00:00
oraclelinux
oraclelinux
Important gnutls security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
redhat
redhat
(RHSA-2006:0680) gnutls security update
2006-09-14 00:00:00
(RHSA-2006:0661) openssl security update
2006-09-06 00:00:00
(RHSA-2007:0073) Critical: java-1.5.0-ibm security update
2007-02-09 00:00:00
debian
debian
[SECURITY] [DSA 1182-1] New gnutls11 packages fix RSA signature forgery cryptographic weakness
2006-09-22 15:34:35
[SECURITY] [DSA 1173-1] New openssl packages fix RSA signature forgery cryptographic weakness
2006-09-10 12:25:00
[SECURITY] [DSA 1174-1] New openssl096 packages fix RSA signature forgery cryptographic weakness
2006-09-11 17:07:45
ubuntu
ubuntu
GnuTLS vulnerability
2006-09-19 00:00:00
OpenSSL vulnerability
2006-09-05 00:00:00
prion
prion
Code injection
2018-11-07 20:29:00
Design/Logic Flaw
2018-09-26 21:29:00
debiancve
debiancve
CVE-2018-16253
2018-11-07 20:29:00
CVE-2018-16152
2018-09-26 21:29:00
CVE-2006-4339
2006-09-05 17:04:00
redhatcve
redhatcve
CVE-2018-16152
2018-10-03 20:20:39
cve
cve
CVE-2018-16253
2018-11-07 20:29:00
CVE-2018-16152
2018-09-26 21:29:00
CVE-2006-4339
2006-09-05 17:04:00
alpinelinux
alpinelinux
CVE-2018-16152
2018-09-26 21:29:00
osv
osv
CVE-2018-16253
2018-11-07 20:29:00
CVE-2018-16152
2018-09-26 21:29:01
openssl - cryptographic weakness
2006-09-10 00:00:00
suse
suse
remote code execution in IBMJava2
2007-01-18 16:13:31
remote code execution in opera
2006-10-19 13:18:21
RSA signature evasion in openssl,mozilla-nss
2006-09-22 15:25:59
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt4
2006-09-06 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2006-4339
2006-09-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against OpenSSL RSA Key Signature Forgery Vulnerability
2006-11-13 00:00:00
f5
f5
SOL6623 - OpenSSL signature vulnerability - CVE-2006-4339
2007-05-16 00:00:00
K6623 : OpenSSL signature vulnerability - CVE-2006-4339
2013-03-26 00:00:00
slackware
slackware
[slackware-security] bind
2006-11-07 06:26:27
[slackware-security] openssl
2006-09-14 22:05:20
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:19.openssl
2006-09-06 00:00:00
jvn
jvn
JVN#51615542: Adobe Reader fails to properly handle signatures
2012-08-30 00:00:00
checkpoint_security
checkpoint_security
OpenSSL CVE-2006-4339 8732 vulnerability Fix
2006-10-18 22:00:00
cert
cert
Multiple RSA implementations fail to properly handle signatures
2006-09-11 00:00:00
mozilla
mozilla
RSA Signature Forgery — Mozilla
2006-09-14 00:00:00
cisco
cisco
OpenSSL RSA Signature Forgery Vulnerability
2006-09-05 17:39:31

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.063 Low

EPSS

Percentile

93.6%

JSON
Related for CVE-2006-4790
nessus87ubuntucve4openvas49gentoo3centos3freebsd3securityvulns4oraclelinux3redhat3debian3ubuntu2prion2debiancve4redhatcve1cve6alpinelinux1osv3suse3altlinux3openssl1checkpoint_advisories1f52slackware2freebsd_advisory1jvn1checkpoint_security1cert1mozilla1cisco1