{"id":"CVE-2006-4339","published":"2006-09-05T17:00:00Z","modified":"2026-10-30T16:33:15Z","title":"Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass","vendor":"Red Hat","product":"Red Hat Enterprise Linux 3","tier":"tail","description":{"text":"A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.05088,"percentile":0.92343,"provenance":"source"},"cwes":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature"}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/238","tags":[]},{"url":"http://docs.info.apple.com/article.html?artnum=304829","tags":[]},{"url":"http://docs.info.apple.com/article.html?artnum=307177","tags":[]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495","tags":[]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","tags":[]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","tags":[]},{"url":"http://jvn.jp/en/jp/JVN51615542/index.html","tags":[]},{"url":"http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html","tags":[]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html","tags":[]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","tags":[]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","tags":[]},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","tags":[]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","tags":[]},{"url":"http://openvpn.net/changelog.html","tags":[]},{"url":"http://secunia.com/advisories/21709","tags":[]},{"url":"http://secunia.com/advisories/21767","tags":[]},{"url":"http://secunia.com/advisories/21776","tags":[]},{"url":"http://secunia.com/advisories/21778","tags":[]},{"url":"http://secunia.com/advisories/21785","tags":[]},{"url":"http://secunia.com/advisories/21791","tags":[]},{"url":"http://secunia.com/advisories/21812","tags":[]},{"url":"http://secunia.com/advisories/21823","tags":[]},{"url":"http://secunia.com/advisories/21846","tags":[]},{"url":"http://secunia.com/advisories/21852","tags":[]},{"url":"http://secunia.com/advisories/21870","tags":[]},{"url":"http://secunia.com/advisories/21873","tags":[]},{"url":"http://secunia.com/advisories/21906","tags":[]},{"url":"http://secunia.com/advisories/21927","tags":[]},{"url":"http://secunia.com/advisories/21930","tags":[]},{"url":"http://secunia.com/advisories/21982","tags":[]},{"url":"http://secunia.com/advisories/22036","tags":[]},{"url":"http://secunia.com/advisories/22044","tags":[]},{"url":"http://secunia.com/advisories/22066","tags":[]},{"url":"http://secunia.com/advisories/22161","tags":[]},{"url":"http://secunia.com/advisories/22226","tags":[]},{"url":"http://secunia.com/advisories/22232","tags":[]},{"url":"http://secunia.com/advisories/22259","tags":[]},{"url":"http://secunia.com/advisories/22260","tags":[]},{"url":"http://secunia.com/advisories/22284","tags":[]},{"url":"http://secunia.com/advisories/22325","tags":[]},{"url":"http://secunia.com/advisories/22446","tags":[]},{"url":"http://secunia.com/advisories/22509","tags":[]},{"url":"http://secunia.com/advisories/22513","tags":[]},{"url":"http://secunia.com/advisories/22523","tags":[]},{"url":"http://secunia.com/advisories/22545","tags":[]},{"url":"http://secunia.com/advisories/22585","tags":[]},{"url":"http://secunia.com/advisories/22671","tags":[]},{"url":"http://secunia.com/advisories/22689","tags":[]},{"url":"http://secunia.com/advisories/22711","tags":[]},{"url":"http://secunia.com/advisories/22733","tags":[]}],"priority":{"score":24.8,"factors":[{"name":"EPSS percentile","points":18.47},{"name":"CVSS severity","points":6.37}]},"vendorSlug":"red-hat","referencesTotal":208,"affectedVersions":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 3","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 3","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 4","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 4","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 4.2","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 4.2","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 4.2 (RHEL3)","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 4.2 (RHEL3)","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 5.0","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Network Satellite Server v 5.0","versions":["all versions"]}],"euvd":{"id":"EUVD-2006-4327","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-red-hat-enterprise-linux-3-cve-2006-4339","children":[{"from":"CVE-2006-4339","to":"CVE-2006-4790","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"…ld when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.","from":"CVE.org","in":"CVE-2006-4790"}]},{"from":"CVE-2006-4339","to":"CVE-2006-4340","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…onkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339.","from":"CVE.org","in":"CVE-2006-4340"}]},{"from":"CVE-2006-4339","to":"CVE-2006-5484","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…enerating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.","from":"CVE.org","in":"CVE-2006-5484"}]},{"from":"CVE-2006-4339","to":"CVE-2006-7140","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…enerating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents libike from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.","from":"CVE.org","in":"CVE-2006-7140"}]}]}}