Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-4339HistorySep 05, 2006 - 5:04 p.m.
CVE-2006-4339
2006-09-0517:04:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.093 Low
EPSS
Percentile
94.6%
OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 0.9.8b-3 | openssl_0.9.8b-3_all.deb |
| Debian | 11 | all | openssl | < 0.9.8b-3 | openssl_0.9.8b-3_all.deb |
| Debian | 10 | all | openssl | < 0.9.8b-3 | openssl_0.9.8b-3_all.deb |
| Debian | 999 | all | openssl | < 0.9.8b-3 | openssl_0.9.8b-3_all.deb |
| Debian | 13 | all | openssl | < 0.9.8b-3 | openssl_0.9.8b-3_all.deb |
Related
openvas
openvas
Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14
2009-06-03 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-06:19.openssl.asc)
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200609-18 (opera)
2008-09-24 00:00:00
nessus
nessus
f5
f5
K6623 : OpenSSL signature vulnerability - CVE-2006-4339
2013-03-26 00:00:00
SOL6623 - OpenSSL signature vulnerability - CVE-2006-4339
2007-05-16 00:00:00
debian
debian
cve
cve
centos
centos
openssl, openssl095a, openssl096 security update
2006-09-11 00:52:04
openssl, openssl096b security update
2006-09-08 09:58:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt4
2006-09-06 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2006-4339
2006-09-05 00:00:00
gentoo
gentoo
OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
2006-09-07 00:00:00
Mozilla Network Security Service (NSS): RSA signature forgery
2006-10-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against OpenSSL RSA Key Signature Forgery Vulnerability
2006-11-13 00:00:00
securityvulns
securityvulns
OpenSSL Security Advisory [5th September 2006] RSA Signature Forgery (CVE-2006-4339)
2006-09-05 00:00:00
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
2006-09-15 00:00:00
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
2006-11-05 00:00:00
slackware
slackware
[slackware-security] bind
2006-11-07 06:26:27
[slackware-security] openssl
2006-09-14 22:05:20
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:19.openssl
2006-09-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2006-09-05 00:00:00
jvn
jvn
JVN#51615542: Adobe Reader fails to properly handle signatures
2012-08-30 00:00:00
osv
osv
openssl - cryptographic weakness
2006-09-10 00:00:00
checkpoint_security
checkpoint_security
OpenSSL CVE-2006-4339 8732 vulnerability Fix
2006-10-18 22:00:00
redhat
redhat
(RHSA-2006:0661) openssl security update
2006-09-06 00:00:00
(RHSA-2007:0073) Critical: java-1.5.0-ibm security update
2007-02-09 00:00:00
(RHSA-2007:0062) Critical: java-1.4.2-ibm security update
2007-02-07 00:00:00
ubuntucve
ubuntucve
freebsd
freebsd
openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3)
2006-09-06 00:00:00
opera -- RSA Signature Forgery
2006-09-18 00:00:00
openoffice.org -- multiple vulnerabilities
2006-08-24 00:00:00
cert
cert
Multiple RSA implementations fail to properly handle signatures
2006-09-11 00:00:00
suse
suse
remote code execution in opera
2006-10-19 13:18:21
RSA signature evasion in openssl,mozilla-nss
2006-09-22 15:25:59
remote code execution in IBMJava2
2007-01-18 16:13:31
mozilla
mozilla
RSA Signature Forgery — Mozilla
2006-09-14 00:00:00
cisco
cisco
OpenSSL RSA Signature Forgery Vulnerability
2006-09-05 17:39:31
debiancve
debiancve
CVE-2006-4340
2006-09-15 18:07:00
oraclelinux
oraclelinux
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
threatpost
threatpost
OpenOffice Zaps Six Security Bugs
2010-02-18 15:09:26
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.093 Low
EPSS
Percentile
94.6%
Related for DEBIANCVE:CVE-2006-4339