Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:0.9.7a-33.18 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:2.1::ascpe:/o:redhat:enterprise_linux:2.1::awcpe:/o:redhat:enterprise_linux:2.1::escpe:/o:redhat:enterprise_linux:2.1::wscpe:/o:redhat:enterprise_linux:3::ascpe:/o:redhat:enterprise_linux:3::desktopcpe:/o:redhat:enterprise_linux:3::escpe:/o:redhat:enterprise_linux:3::wscpe:/o:redhat:enterprise_linux:4::ascpe:/o:redhat:enterprise_linux:4::desktopcpe:/o:redhat:enterprise_linux:4::escpe:/o:redhat:enterprise_linux:4::ws

Red Hat · redhat

Red Hat Enterprise Linux 3

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:0.9.6b-16.43 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

Red Hat · redhat

Red Hat Enterprise Linux 4

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:0.9.7a-43.11 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

Red Hat · redhat

Red Hat Enterprise Linux 4

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:0.9.6b-22.43 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

Red Hat · redhat

Red Hat Network Satellite Server v 4.2

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:5.0.2-3 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:4.2::el3cpe:/a:redhat:network_satellite:4.2::el4

Red Hat · redhat

Red Hat Network Satellite Server v 4.2

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:1-0 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:4.2::el3cpe:/a:redhat:network_satellite:4.2::el4

Red Hat · redhat

Red Hat Network Satellite Server v 4.2 (RHEL3)

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:5.0.2-3 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:4.2::el3cpe:/a:redhat:network_satellite:4.2::el4

Red Hat · redhat

Red Hat Network Satellite Server v 4.2 (RHEL3)

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:1-0 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:4.2::el3cpe:/a:redhat:network_satellite:4.2::el4

Red Hat · redhat

Red Hat Network Satellite Server v 5.0

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:5.0.2-3 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:5.0:el4

Red Hat · redhat

Red Hat Network Satellite Server v 5.0

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:1-0 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:5.0:el4

Red Hat · redhat

Red Hat Network Satellite Server v 5.1

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:5.1.1-3 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:5.1::el4

Red Hat · redhat

Red Hat Network Satellite Server v 5.1

1 range

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

unaffected

0:1-0 → before *

rpm versions

Other versions: affected

Product identifiers (CPE)

cpe:/a:redhat:network_satellite:5.1::el4

Red Hat · redhat

Red Hat Enterprise Linux 10

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:10

Red Hat · redhat

Red Hat Enterprise Linux 10

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:10

Red Hat · redhat

Red Hat Enterprise Linux 10

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:10

Red Hat · redhat

Red Hat Enterprise Linux 10

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:10

Red Hat · redhat

Red Hat Enterprise Linux 10

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:10

Red Hat · redhat

Red Hat Enterprise Linux 6

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:6

Red Hat · redhat

Red Hat Enterprise Linux 7

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:7

Red Hat · redhat

Red Hat Enterprise Linux 7

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:7

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 8

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:8

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat Enterprise Linux 9

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/o:redhat:enterprise_linux:9

Red Hat · redhat

Red Hat JBoss Core Services

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/a:redhat:jboss_core_services:1

Red Hat · redhat

Red Hat OpenShift Container Platform 4

0 ranges

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/a:redhat:openshift:4

Red Hat · redhat

Red Hat OpenShift Container Platform 4

0 ranges

dev2dev.bea.com/pub/advisory/238

Check a product version

Compare with this publisher’s ranges. This does not inspect your installation.

Other versions: unaffected

Product identifiers (CPE)

cpe:/a:redhat:openshift:4

Original source description

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

Inside the record

Evidence available

Package identity · not supplied

Version evidence

Remediation guidance

Weakness classification

Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2006-4339

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-347 ↗

Improper Verification of Cryptographic Signature

redhat

Contributing organizations · 2

redhat

Assigning organization

2026-10-30

CVE

Additional data publisher

2024-08-07

What changed

Follow changes

No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

207 sources

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp

itrc.hp.com/service/cki/docDisplay.do

lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

View 201 more references

marc.info/

security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc

security.gentoo.org/glsa/glsa-200609-05.xml

security.gentoo.org/glsa/glsa-200609-18.xml

slackware.com/security/viewer.php

slackware.com/security/viewer.php

www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html

www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml

www.debian.org/security/2006/dsa-1174

www.gentoo.org/security/en/glsa/glsa-200610-06.xml

www.gentoo.org/security/en/glsa/glsa-201408-19.xml

www.novell.com/linux/security/advisories/2006_26_sr.html

www.novell.com/linux/security/advisories/2006_55_ssl.html

www.novell.com/linux/security/advisories/2006_61_opera.html

www.novell.com/linux/security/advisories/2007_10_ibmjava.html

www.openbsd.org/errata.html

www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html

www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html

www.redhat.com/support/errata/RHSA-2006-0661.html

www.redhat.com/support/errata/RHSA-2007-0062.html

www.redhat.com/support/errata/RHSA-2007-0072.html

www.redhat.com/support/errata/RHSA-2007-0073.html

www.redhat.com/support/errata/RHSA-2008-0629.html

www.securityfocus.com/archive/1/450327/100/0/threaded

www.ubuntu.com/usn/usn-339-1

www.us.debian.org/security/2006/dsa-1173

www1.itrc.hp.com/service/cki/docDisplay.do

access.redhat.com/errata/RHSA-2006:0661

access.redhat.com/errata/RHSA-2007:0062

access.redhat.com/errata/RHSA-2007:0072

access.redhat.com/errata/RHSA-2007:0073

access.redhat.com/errata/RHSA-2008:0264

access.redhat.com/errata/RHSA-2008:0525

access.redhat.com/errata/RHSA-2008:0629

www2.itrc.hp.com/service/cki/docDisplay.do

docs.info.apple.com/article.html

docs.info.apple.com/article.html

jvn.jp/en/jp/JVN51615542/index.html

jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html

lists.vmware.com/pipermail/security-announce/2008/000008.html

marc.info/

openvpn.net/changelog.html

Release notesredhat · CVE

secunia.com/advisories/21709

secunia.com/advisories/21767

secunia.com/advisories/21776

secunia.com/advisories/21778

secunia.com/advisories/21785

secunia.com/advisories/21791

secunia.com/advisories/21812

secunia.com/advisories/21823

secunia.com/advisories/21846

secunia.com/advisories/21852

secunia.com/advisories/21870

secunia.com/advisories/21873

secunia.com/advisories/21906

secunia.com/advisories/21927

secunia.com/advisories/21930

secunia.com/advisories/21982

secunia.com/advisories/22036

secunia.com/advisories/22044

secunia.com/advisories/22066

secunia.com/advisories/22161

secunia.com/advisories/22226

secunia.com/advisories/22232

secunia.com/advisories/22259

secunia.com/advisories/22260

secunia.com/advisories/22284

secunia.com/advisories/22325

secunia.com/advisories/22446

secunia.com/advisories/22509

secunia.com/advisories/22513

secunia.com/advisories/22523

secunia.com/advisories/22545

secunia.com/advisories/22585

secunia.com/advisories/22671

secunia.com/advisories/22689

secunia.com/advisories/22711

secunia.com/advisories/22733

secunia.com/advisories/22758

secunia.com/advisories/22799

secunia.com/advisories/22932

secunia.com/advisories/22934

secunia.com/advisories/22936

secunia.com/advisories/22937

secunia.com/advisories/22938

secunia.com/advisories/22939

secunia.com/advisories/22940

secunia.com/advisories/22948

secunia.com/advisories/22949

secunia.com/advisories/23155

secunia.com/advisories/23455

secunia.com/advisories/23680

secunia.com/advisories/23794

secunia.com/advisories/23841

secunia.com/advisories/23915

secunia.com/advisories/24099

secunia.com/advisories/24930

secunia.com/advisories/24950

secunia.com/advisories/25284

secunia.com/advisories/25399

secunia.com/advisories/25649

secunia.com/advisories/26329

secunia.com/advisories/26893

secunia.com/advisories/28115

secunia.com/advisories/31492

secunia.com/advisories/38567

secunia.com/advisories/38568

secunia.com/advisories/41818

secunia.com/advisories/60799

securitytracker.com/id

securitytracker.com/id

support.attachmate.com/techdocs/2127.html

support.attachmate.com/techdocs/2128.html

support.attachmate.com/techdocs/2137.html

support.avaya.com/elmodocs2/security/ASA-2006-188.htm

www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf

www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html

www.imc.org/ietf-openpgp/mail-archive/msg14307.html

www.kb.cert.org/vuls/id/845620

www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/

www.openoffice.org/security/cves/CVE-2006-4339.html

www.openssl.org/news/secadv_20060905.txt

www.opera.com/support/search/supsearch.dml

www.oracle.com/technetwork/topics/security/cpujan2007-101493.html

www.osvdb.org/28549

www.securityfocus.com/archive/1/445231/100/0/threaded

www.securityfocus.com/archive/1/445822/100/0/threaded

www.securityfocus.com/archive/1/456546/100/200/threaded

www.securityfocus.com/archive/1/489739/100/0/threaded

www.securityfocus.com/bid/19849

www.securityfocus.com/bid/22083

www.securityfocus.com/bid/28276

www.serv-u.com/releasenotes/

www.sybase.com/detail

www.us-cert.gov/cas/techalerts/TA06-333A.html

www.vmware.com/security/advisories/VMSA-2008-0005.html

www.vmware.com/support/ace2/doc/releasenotes_ace2.html

www.vmware.com/support/esx2/doc/esx-202-200612-patch.html

www.vmware.com/support/esx21/doc/esx-213-200612-patch.html

www.vmware.com/support/esx25/doc/esx-253-200612-patch.html

www.vmware.com/support/esx25/doc/esx-254-200612-patch.html

www.vmware.com/support/player/doc/releasenotes_player.html

www.vmware.com/support/player2/doc/releasenotes_player2.html

www.vmware.com/support/server/doc/releasenotes_server.html

www.vmware.com/support/vi3/doc/esx-3069097-patch.html

www.vmware.com/support/vi3/doc/esx-9986131-patch.html

www.vmware.com/support/ws55/doc/releasenotes_ws55.html

www.vmware.com/support/ws6/doc/releasenotes_ws6.html

www.vupen.com/english/advisories/2006/3453

www.vupen.com/english/advisories/2006/3566

www.vupen.com/english/advisories/2006/3730

www.vupen.com/english/advisories/2006/3748

www.vupen.com/english/advisories/2006/3793

www.vupen.com/english/advisories/2006/3899

www.vupen.com/english/advisories/2006/3936

www.vupen.com/english/advisories/2006/4205

www.vupen.com/english/advisories/2006/4206

www.vupen.com/english/advisories/2006/4207

www.vupen.com/english/advisories/2006/4216

www.vupen.com/english/advisories/2006/4327

www.vupen.com/english/advisories/2006/4329

www.vupen.com/english/advisories/2006/4366

www.vupen.com/english/advisories/2006/4417

www.vupen.com/english/advisories/2006/4586

www.vupen.com/english/advisories/2006/4744

www.vupen.com/english/advisories/2006/4750

www.vupen.com/english/advisories/2006/5146

www.vupen.com/english/advisories/2007/0254

www.vupen.com/english/advisories/2007/0343

www.vupen.com/english/advisories/2007/1401

www.vupen.com/english/advisories/2007/1815

www.vupen.com/english/advisories/2007/1945

www.vupen.com/english/advisories/2007/2163

www.vupen.com/english/advisories/2007/2315

www.vupen.com/english/advisories/2007/2783

www.vupen.com/english/advisories/2007/4224

www.vupen.com/english/advisories/2008/0905/references

www.vupen.com/english/advisories/2010/0366

www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd

access.redhat.com/security/cve/CVE-2006-4339

vdb-entryredhat

exchange.xforce.ibmcloud.com/vulnerabilities/28755

issues.rpath.com/browse/RPL-1633

issues.rpath.com/browse/RPL-616

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656

secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html