CVE-2006-4339

CVE-2006-4339 affects OpenSSL versions prior to 0.9.7 and 0.9.8 before patches (0.9.7k, 0.9.8c) where using an RSA key with exponent 3 causes PKCS#1 padding to be removed before hash generation. This enables remote attackers to forge a PKCS#1 v1.5 signature signed by that RSA key and can prevent ...

CVE-2006-4339

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying...

Vulnerability in OpenSSL - RSA Signature Forgery

Daniel Bleichenbacher discovered an attack on PKCS 1 v1.5 signatures where under certain circumstances it may be possible for an attacker to forge a PKCS 1 v1.5 signature that would be incorrectly verified by OpenSSL...

OpenSSL Security Advisory [5th September 2006] RSA Signature Forgery (CVE-2006-4339)

OpenSSL Security Advisory 5th September 2006 RSA Signature Forgery CVE-2006-4339 ===================================== Vulnerability ------------- Daniel Bleichenbacher recently described an attack on PKCS 1 v1.5 signatures. If an RSA key with exponent 3 is used it may be possible to forge a PKCS...

CVE-2006-0584

CVE-2006-0584 affects PeopleSoft People Tools 8.4x where the PSCipher function uses PKCS #5 with a fixed DES key to store passwords. This enables local attackers to perform dictionary-style guessing by comparing output strings. The provided documents describe the root cause (fixed DES key) and im...

CVE-2006-0584

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

SSH PKCS #1 Version 1.5 Session Key Retrieval Vulnerability

Implementations of SSH version 1.5 are prone to a session key retrieval vulnerability. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2002-1446

The CVE-2002-1446 entry concerns the nCipher PKCS#11 library (version 1.2.0 and later). The C_Verify error checking routine for a symmetric verification key can return CKR_OK even when it detects an invalid signature, creating a vulnerability where remote attackers could modify or forge messages....

CVE-2004-0590

The CVE-2004-0590 entry affects FreeS/WAN and related IPsec implementations (OpenS/WAN, FreeS/WAN derivatives, Super-FreeS/WAN, and strongSwan). The root cause described across connected docs is bugs in the verify_x509cert() certificate validation, allowing remote attackers to authenticate using ...

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

Overview SSL/TLS implementations that respond distinctively to an incorrect PKCS 1 v1.5 encoded SSL/TLS version number expose the premaster secret to a modified Bleichenbacher attack. An attacker could decrypt a given SSL/TLS session or forge a signature on behalf of a vulnerable application's...

CVE-2003-0131

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS 1 v1.5 padding that cause OpenSSL to leak...

CVE-2003-0131

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS 1 v1.5 padding that cause OpenSSL to leak...

CVE-2003-0131

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS 1 v1.5 padding that cause OpenSSL to leak...

Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding

On some conditions it's possible server's private key to be applied to attacker choosen ciphertext...

Weak nCipher PKCS#11 encryption

Library error may lead to uncrypted key in certificate...

nCipher Advisory #6: Access control defects in PKCS#11 keys

nCipher Security Advisory No. 6 Access control defects in PKCS11 keys -------------------------------------- SUMMARY ======= As a function of internal QA testing, nCipher has identified that, under certain unusual circumstances, keys created by the nCipher PKCS11 library, which should be secure,...

Certain implementations of SSH1 may reveal internal cryptologic state

Overview An implementation problem in at least one Secure Shell SSH product and a weakness in the PKCS11.5 public key encryption standard allows attackers to recover plaintext of messages encrypted with SSH. Description A weakness in some SSH products using the SSH1 protocol may allow an attacker...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...

CVE-2001-0361

CVE-2001-0361 affects SSH v1.5 implementations, notably OpenSSH up to 2.3.0, AppGate, and ssh-1 up to 1.2.31, when configured in certain ways. The issue enables a remote attacker to decrypt and/or alter traffic via a Bleichenbacher attack on PKCS#1 version 1.5. The connected PT security entries (...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...