Skip to content
Sign in
9.1 Critical

CVE-2006-4339 Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

Description

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Affected products and versions

Product Affected versions Fixed in
n/a Versions not published
Red Hat Enterprise Linux 3 Versions not published
Red Hat Enterprise Linux 4 Versions not published
Red Hat Network Satellite Server v 4.2 Versions not published
Red Hat Network Satellite Server v 4.2 (RHEL3) Versions not published
Red Hat Network Satellite Server v 5.0 Versions not published
Red Hat Network Satellite Server v 5.1 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Show the 5 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat JBoss Core Services Versions not published
Red Hat OpenShift Container Platform 4 Versions not published

Other CVEs of n/a

The 144658 CVEs of n/a →
CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Not rated CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Not rated CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Not rated CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Not rated
Track this CVE