Lucene search
SuseSUSE-SA:2006:055HistorySep 22, 2006 - 3:25 p.m.
RSA signature evasion in openssl,mozilla-nss
2006-09-2215:25:59
lists.opensuse.org
15
0.33 Low
EPSS
Percentile
96.6%
If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature.
Solution
There is no known workaround, please install the update packages.
Related
nessus
nessus
SUSE-SA:2006:055: openssl,mozilla-nss
2007-02-18 00:00:00
openSUSE 10 Security Update : mozilla-nss (mozilla-nss-2071)
2007-10-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200610-06 (nss)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200610-06 (nss)
2008-09-24 00:00:00
Solaris Update for NSPR 4.1.6 / NSS 3.3.4.8 114049-14
2009-06-03 00:00:00
mozilla
mozilla
RSA Signature Forgery — Mozilla
2006-09-14 00:00:00
cve
cve
gentoo
gentoo
Mozilla Network Security Service (NSS): RSA signature forgery
2006-10-17 00:00:00
OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
2006-09-07 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
veracode
veracode
Spoofable SSL Certificate
2020-04-10 00:13:11
f5
f5
K6623 : OpenSSL signature vulnerability - CVE-2006-4339
2013-03-26 00:00:00
SOL6623 - OpenSSL signature vulnerability - CVE-2006-4339
2007-05-16 00:00:00
debian
debian
centos
centos
openssl, openssl095a, openssl096 security update
2006-09-11 00:52:04
openssl, openssl096b security update
2006-09-08 09:58:00
checkpoint_advisories
checkpoint_advisories
Update Protection against OpenSSL RSA Key Signature Forgery Vulnerability
2006-11-13 00:00:00
securityvulns
securityvulns
OpenSSL Security Advisory [5th September 2006] RSA Signature Forgery (CVE-2006-4339)
2006-09-05 00:00:00
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
2006-09-15 00:00:00
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
2006-11-05 00:00:00
slackware
slackware
[slackware-security] openssl
2006-09-14 22:05:20
[slackware-security] bind
2006-11-07 06:26:27
ubuntu
ubuntu
OpenSSL vulnerability
2006-09-05 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:19.openssl
2006-09-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt4
2006-09-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt4
2006-09-06 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2006-4339
2006-09-05 00:00:00
jvn
jvn
JVN#51615542: Adobe Reader fails to properly handle signatures
2012-08-30 00:00:00
osv
osv
openssl - cryptographic weakness
2006-09-10 00:00:00
CVE-2018-16150
2018-11-07 20:29:00
mozilla-firefox
2006-11-14 00:00:00
checkpoint_security
checkpoint_security
OpenSSL CVE-2006-4339 8732 vulnerability Fix
2006-10-18 22:00:00
redhat
redhat
(RHSA-2006:0661) openssl security update
2006-09-06 00:00:00
(RHSA-2007:0073) Critical: java-1.5.0-ibm security update
2007-02-09 00:00:00
(RHSA-2007:0072) Critical: IBMJava2 security update
2007-02-08 00:00:00
freebsd
freebsd
openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3)
2006-09-06 00:00:00
opera -- RSA Signature Forgery
2006-09-18 00:00:00
cert
cert
Multiple RSA implementations fail to properly handle signatures
2006-09-11 00:00:00
prion
prion
Code injection
2018-11-07 20:29:00
suse
suse
remote code execution in opera
2006-10-19 13:18:21
remote code execution in IBMJava2
2007-01-18 16:13:31
cisco
cisco
OpenSSL RSA Signature Forgery Vulnerability
2006-09-05 17:39:31
oraclelinux
oraclelinux
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
threatpost
threatpost
OpenOffice Zaps Six Security Bugs
2010-02-18 15:09:26