Multiple packages on Sun Solaris including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier SDK and JRE 1.4.x up to 1.4.2_12 and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice when using an RSA key with exponent 3 removes PKCS-1 padding before generating a hash which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.

🗓️ 25 Sep 2020 00:00:00Reported by MicrosoftType

RSA key exponent three removes PKCS-1 padding on Solaris, enabling signature forgery and cert verification failures.

Reporter	Title	Published	Views	Family All 52
AlpineLinux	CVE-2006-5201	9 Oct 200618:00	–	alpinelinux
CBLMariner	CVE-2006-5201 affecting package nss 3.44-2	10 Jan 202203:59	–	cbl_mariner
CVE	CVE-2006-5201	9 Oct 200618:00	–	cve
Cvelist	CVE-2006-5201	9 Oct 200618:00	–	cvelist
Tenable Nessus	Debian DSA-1174-1 : openssl096 - cryptographic weakness	14 Oct 200600:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : openssl (MDKSA-2006:161)	16 Dec 200600:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : MySQL (MDKSA-2006:177)	18 Feb 200700:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : ntp (MDKSA-2006:178)	18 Feb 200700:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : bind (MDKSA-2006:207)	18 Feb 200700:00	–	nessus
Tenable Nessus	Solaris 10 (sparc) : 116648-25	12 Mar 201800:00	–	nessus