CVE-2006-4339

CVE-2006-4339 affects OpenSSL versions prior to 0.9.7 and 0.9.8 before patches (0.9.7k, 0.9.8c) where using an RSA key with exponent 3 causes PKCS#1 padding to be removed before hash generation. This enables remote attackers to forge a PKCS#1 v1.5 signature signed by that RSA key and can prevent ...