Lucene search
MitreCVELIST:CVE-2006-7140HistoryMar 07, 2007 - 8:00 p.m.
CVE-2006-7140
2007-03-0720:00:00
mitre
www.cve.org
The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents libike from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
Related
cve
cve
nvd
nvd
nessus
nessus
Ubuntu 5.04 / 5.10 / 6.06 LTS : openssl vulnerability (USN-339-1)
2007-11-10 00:00:00
Mandrake Linux Security Advisory : bind (MDKSA-2006:207)
2007-02-18 00:00:00
Solaris 9 (x86) : 114050-14
2004-07-12 00:00:00
openvas
openvas
FreeBSD Ports: opera, opera-devel, linux-opera
2008-09-04 00:00:00
Slackware: Security Advisory (SSA:2006-257-02)
2012-09-10 00:00:00
SLES9: Security update for openssl
2009-10-10 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
2006-11-05 00:00:00
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
2006-09-15 00:00:00
jvn
jvn
JVN#51615542: Adobe Reader fails to properly handle signatures
2012-08-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt4
2006-09-06 00:00:00
gentoo
gentoo
OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
2006-09-07 00:00:00
Mozilla Network Security Service (NSS): RSA signature forgery
2006-10-17 00:00:00
centos
centos
openssl, openssl096b security update
2006-09-08 09:58:00
openssl, openssl095a, openssl096 security update
2006-09-11 00:52:04
openssl
openssl
Vulnerability in OpenSSL CVE-2006-4339
2006-09-05 00:00:00
debiancve
debiancve
CVE-2006-4339
2006-09-05 17:04:00
CVE-2006-4340
2006-09-15 18:07:00
f5
f5
K6623 : OpenSSL signature vulnerability - CVE-2006-4339
2013-03-26 00:00:00
SOL6623 - OpenSSL signature vulnerability - CVE-2006-4339
2007-05-16 00:00:00
debian
debian
slackware
slackware
[slackware-security] openssl
2006-09-14 22:05:20
[slackware-security] bind
2006-11-07 06:26:27
ubuntu
ubuntu
OpenSSL vulnerability
2006-09-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against OpenSSL RSA Key Signature Forgery Vulnerability
2006-11-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:19.openssl
2006-09-06 00:00:00
freebsd
freebsd
openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3)
2006-09-06 00:00:00
opera -- RSA Signature Forgery
2006-09-18 00:00:00
checkpoint_security
checkpoint_security
OpenSSL CVE-2006-4339 8732 vulnerability Fix
2006-10-18 22:00:00
cvelist
cvelist
ubuntucve
ubuntucve
cert
cert
Multiple RSA implementations fail to properly handle signatures
2006-09-11 00:00:00
redhat
redhat
(RHSA-2006:0661) openssl security update
2006-09-06 00:00:00
(RHSA-2007:0062) Critical: java-1.4.2-ibm security update
2007-02-07 00:00:00
(RHSA-2007:0073) Critical: java-1.5.0-ibm security update
2007-02-09 00:00:00
osv
osv
openssl - cryptographic weakness
2006-09-10 00:00:00
cisco
cisco
OpenSSL RSA Signature Forgery Vulnerability
2006-09-05 17:39:31
suse
suse
remote code execution in opera
2006-10-19 13:18:21
RSA signature evasion in openssl,mozilla-nss
2006-09-22 15:25:59
mozilla
mozilla
RSA Signature Forgery — Mozilla
2006-09-14 00:00:00
oraclelinux
oraclelinux
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00