CVE-2006-4339
Critical 9.1
Description
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
Metrics
- CVSS 3.1
-
9.1 (CRITICAL)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS — exploit probability
- 4% (percentile: 90) as of 1 November 2026
- CWE
- CWE-347, CWE-310
Affected products
openssl: openssl
References
- http://secunia.com/advisories/21709 PatchVendor Advisory
- http://secunia.com/advisories/21767 Vendor Advisory
- http://secunia.com/advisories/21776 Vendor Advisory
- http://secunia.com/advisories/21778 Vendor Advisory
- http://secunia.com/advisories/21785 Vendor Advisory
- http://secunia.com/advisories/21791 Vendor Advisory
- http://secunia.com/advisories/21812 Vendor Advisory
- http://secunia.com/advisories/21823 Vendor Advisory
- http://secunia.com/advisories/21846 Vendor Advisory
- http://secunia.com/advisories/21852 Vendor Advisory