Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-4339 Details

Description

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://www.ubuntu.com/usn/usn-339-1	CVE	Patch
http://secunia.com/advisories/21852	CVE	Vendor Advisory
http://www.securityfocus.com/archive/1/450327/100/0/threaded	CVE
http://www.vupen.com/english/advisories/2006/4366	CVE
http://secunia.com/advisories/31492	CVE
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117	CVE
http://secunia.com/advisories/25284	CVE
http://secunia.com/advisories/22509	CVE
http://www.novell.com/linux/security/advisories/2006_26_sr.html	CVE
http://www.vmware.com/support/player/doc/releasenotes_player.html	CVE
http://secunia.com/advisories/22259	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3453	CVE
http://www.openoffice.org/security/cves/CVE-2006-4339.html	CVE
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html	CVE
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495	CVE
http://secunia.com/advisories/21846	CVE	Vendor Advisory
http://secunia.com/advisories/22585	CVE
http://www.us.debian.org/security/2006/dsa-1173	CVE	Patch
http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc	CVE
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html	CVE
http://secunia.com/advisories/22260	CVE	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html	CVE
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html	CVE
http://www.securityfocus.com/bid/28276	CVE
http://www.vupen.com/english/advisories/2006/4586	CVE
http://secunia.com/advisories/22689	CVE
http://secunia.com/advisories/22949	CVE
http://secunia.com/advisories/24930	CVE
http://secunia.com/advisories/26893	CVE
http://www.vupen.com/english/advisories/2006/4207	CVE
http://secunia.com/advisories/21812	CVE	Vendor Advisory
http://secunia.com/advisories/21873	CVE	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1	CVE
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml	CVE
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml	CVE
http://www.vupen.com/english/advisories/2006/4216	CVE
http://www.redhat.com/support/errata/RHSA-2007-0072.html	CVE
http://secunia.com/advisories/22232	CVE	Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:207	CVE
http://secunia.com/advisories/21767	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0254	CVE
http://marc.info/?l=bugtraq&m=130497311408250&w=2	CVE
http://www.securityfocus.com/archive/1/445231/100/0/threaded	CVE
http://secunia.com/advisories/22934	CVE
http://security.gentoo.org/glsa/glsa-200609-18.xml	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955	CVE
http://secunia.com/advisories/22523	CVE
http://secunia.com/advisories/22733	CVE
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1	CVE
http://secunia.com/advisories/24950	CVE
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml	CVE
http://secunia.com/advisories/22044	CVE
http://secunia.com/advisories/24099	CVE
http://secunia.com/advisories/22513	CVE
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html	CVE
http://www.vupen.com/english/advisories/2006/4329	CVE
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	CVE
http://secunia.com/advisories/21791	CVE	Vendor Advisory
http://www.openbsd.org/errata.html	CVE
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html	CVE
http://secunia.com/advisories/25649	CVE
http://www.vupen.com/english/advisories/2006/4327	CVE
http://secunia.com/advisories/28115	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1	CVE
http://www.vupen.com/english/advisories/2007/1815	CVE
http://support.attachmate.com/techdocs/2128.html	CVE
http://secunia.com/advisories/21709	CVE	PatchVendor Advisory
http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/	CVE
http://secunia.com/advisories/23915	CVE
http://security.gentoo.org/glsa/glsa-200609-05.xml	CVE
http://www.vupen.com/english/advisories/2006/3748	CVE
http://www.vupen.com/english/advisories/2006/4206	CVE
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0062.html	CVE
http://docs.info.apple.com/article.html?artnum=304829	CVE
http://secunia.com/advisories/26329	CVE
http://secunia.com/advisories/21930	CVE	Vendor Advisory
http://securitytracker.com/id?1017522	CVE
http://www.vupen.com/english/advisories/2008/0905/references	CVE
http://secunia.com/advisories/22711	CVE
http://secunia.com/advisories/23155	CVE
http://www.vmware.com/support/server/doc/releasenotes_server.html	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1	CVE
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	CVE
http://www.vupen.com/english/advisories/2007/4224	CVE
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html	CVE
http://www.sybase.com/detail?id=1047991	CVE
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	CVE
http://www.securityfocus.com/bid/22083	CVE
https://issues.rpath.com/browse/RPL-1633	CVE
http://www.vupen.com/english/advisories/2007/2783	CVE
http://www.vupen.com/english/advisories/2007/2315	CVE
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	CVE
http://www.debian.org/security/2006/dsa-1174	CVE	Patch
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	CVE
http://www.vupen.com/english/advisories/2006/3730	CVE
http://www.serv-u.com/releasenotes/	CVE
http://secunia.com/advisories/21778	CVE	Vendor Advisory
http://secunia.com/advisories/21982	CVE	Vendor Advisory
http://secunia.com/advisories/21776	CVE	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1	CVE
http://support.attachmate.com/techdocs/2137.html	CVE
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742	CVE
http://www.vupen.com/english/advisories/2006/3936	CVE
http://secunia.com/advisories/22948	CVE
http://secunia.com/advisories/23680	CVE
http://www.vupen.com/english/advisories/2006/4750	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177	CVE
http://jvn.jp/en/jp/JVN51615542/index.html	CVE
http://secunia.com/advisories/21823	CVE	Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178	CVE
http://openvpn.net/changelog.html	CVE
http://secunia.com/advisories/21870	CVE	Vendor Advisory
http://secunia.com/advisories/22226	CVE	Vendor Advisory
http://secunia.com/advisories/22936	CVE
http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf	CVE
http://secunia.com/advisories/22758	CVE
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html	CVE
http://secunia.com/advisories/22799	CVE
http://secunia.com/advisories/22937	CVE
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/28755	CVE
http://dev2dev.bea.com/pub/advisory/238	CVE
http://www.vupen.com/english/advisories/2007/1945	CVE
http://docs.info.apple.com/article.html?artnum=307177	CVE
http://secunia.com/advisories/41818	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm	CVE
http://www.openssl.org/news/secadv_20060905.txt	CVE	PatchVendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1	CVE
http://secunia.com/advisories/22066	CVE
http://www.securityfocus.com/bid/19849	CVE	Patch
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html	CVE
http://www.vupen.com/english/advisories/2006/3899	CVE
http://www.vupen.com/english/advisories/2007/0343	CVE
http://secunia.com/advisories/22940	CVE
http://secunia.com/advisories/23455	CVE
http://support.attachmate.com/techdocs/2127.html	CVE
http://www.vupen.com/english/advisories/2006/3793	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306	CVE
http://secunia.com/advisories/38568	CVE
http://secunia.com/advisories/21785	CVE	Vendor Advisory
http://secunia.com/advisories/22446	CVE
http://www.vupen.com/english/advisories/2007/2163	CVE
http://www.vupen.com/english/advisories/2010/0366	CVE
http://www.vupen.com/english/advisories/2006/4744	CVE
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0073.html	CVE
http://www.vupen.com/english/advisories/2006/3566	CVE
http://secunia.com/advisories/21906	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/4205	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1	CVE
http://www.kb.cert.org/vuls/id/845620	CVE	US Government Resource
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144	CVE
https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html	CVE
http://www.opera.com/support/search/supsearch.dml?index=845	CVE
http://secunia.com/advisories/60799	CVE
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771	CVE
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540	CVE
http://secunia.com/advisories/22036	CVE	Vendor Advisory
http://secunia.com/advisories/38567	CVE
http://www.osvdb.org/28549	CVE
http://www.vupen.com/english/advisories/2006/5146	CVE
https://issues.rpath.com/browse/RPL-616	CVE
http://secunia.com/advisories/23794	CVE
http://www.securityfocus.com/archive/1/456546/100/200/threaded	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:161	CVE
http://secunia.com/advisories/22939	CVE
http://secunia.com/advisories/22161	CVE	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1	CVE
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html	CVE
http://marc.info/?l=bind-announce&m=116253119512445&w=2	CVE
http://secunia.com/advisories/22671	CVE
http://secunia.com/advisories/22284	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1	CVE
http://secunia.com/advisories/22932	CVE
http://secunia.com/advisories/22938	CVE
http://secunia.com/advisories/23841	CVE
http://securitytracker.com/id?1016791	CVE
http://secunia.com/advisories/21927	CVE	Vendor Advisory
http://secunia.com/advisories/25399	CVE
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html	CVE
http://www.redhat.com/support/errata/RHSA-2008-0629.html	CVE
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	CVE	US Government Resource
http://secunia.com/advisories/22325	CVE
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	CVE
http://www.securityfocus.com/archive/1/489739/100/0/threaded	CVE
http://www.vupen.com/english/advisories/2007/1401	CVE
http://www.securityfocus.com/archive/1/445822/100/0/threaded	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1	CVE
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html	CVE
http://secunia.com/advisories/22545	CVE
http://www.novell.com/linux/security/advisories/2006_61_opera.html	CVE
http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656	CVE
http://www.novell.com/linux/security/advisories/2006_55_ssl.html	CVE
http://www.vupen.com/english/advisories/2006/4417	CVE
http://www.redhat.com/support/errata/RHSA-2006-0661.html	CVE	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1	[email protected]
http://www.vupen.com/english/advisories/2007/2163	[email protected]
http://secunia.com/advisories/22066	[email protected]
http://secunia.com/advisories/25284	[email protected]
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2008-0629.html	[email protected]
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	[email protected]
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html	[email protected]
http://secunia.com/advisories/22232	[email protected]	Vendor Advisory
http://secunia.com/advisories/23915	[email protected]
http://secunia.com/advisories/25649	[email protected]
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html	[email protected]
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	[email protected]
http://security.gentoo.org/glsa/glsa-200609-18.xml	[email protected]
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html	[email protected]
http://secunia.com/advisories/22325	[email protected]
http://secunia.com/advisories/22545	[email protected]
http://secunia.com/advisories/22938	[email protected]
http://www.vupen.com/english/advisories/2007/1945	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955	[email protected]
http://www.redhat.com/support/errata/RHSA-2006-0661.html	[email protected]	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1	[email protected]
http://www.osvdb.org/28549	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0072.html	[email protected]
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	[email protected]
http://secunia.com/advisories/22260	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2315	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656	[email protected]
http://security.gentoo.org/glsa/glsa-200609-05.xml	[email protected]
http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html	[email protected]
http://www.securityfocus.com/archive/1/450327/100/0/threaded	[email protected]
http://secunia.com/advisories/23794	[email protected]
http://www.novell.com/linux/security/advisories/2006_26_sr.html	[email protected]
http://secunia.com/advisories/22226	[email protected]	Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc	[email protected]
http://securitytracker.com/id?1017522	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1	[email protected]
http://dev2dev.bea.com/pub/advisory/238	[email protected]
http://marc.info/?l=bind-announce&m=116253119512445&w=2	[email protected]
http://secunia.com/advisories/22513	[email protected]
http://secunia.com/advisories/31492	[email protected]
http://support.attachmate.com/techdocs/2137.html	[email protected]
http://www.vupen.com/english/advisories/2006/5146	[email protected]
http://docs.info.apple.com/article.html?artnum=307177	[email protected]
http://secunia.com/advisories/22939	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0062.html	[email protected]
http://docs.info.apple.com/article.html?artnum=304829	[email protected]
http://www.vupen.com/english/advisories/2006/4329	[email protected]
http://secunia.com/advisories/21767	[email protected]	Vendor Advisory
http://secunia.com/advisories/22044	[email protected]
http://support.attachmate.com/techdocs/2128.html	[email protected]
http://www.securityfocus.com/archive/1/456546/100/200/threaded	[email protected]
http://www.debian.org/security/2006/dsa-1174	[email protected]	Patch
http://secunia.com/advisories/22936	[email protected]
http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf	[email protected]
https://issues.rpath.com/browse/RPL-616	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178	[email protected]
http://www.vupen.com/english/advisories/2007/0343	[email protected]
http://secunia.com/advisories/22937	[email protected]
http://secunia.com/advisories/21982	[email protected]	Vendor Advisory
http://secunia.com/advisories/38567	[email protected]
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html	[email protected]
http://secunia.com/advisories/21709	[email protected]	PatchVendor Advisory
http://www.vupen.com/english/advisories/2006/4417	[email protected]
http://www.securityfocus.com/archive/1/445231/100/0/threaded	[email protected]
http://www.vupen.com/english/advisories/2006/4216	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306	[email protected]
http://www.opera.com/support/search/supsearch.dml?index=845	[email protected]
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117	[email protected]
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html	[email protected]
http://secunia.com/advisories/24930	[email protected]
http://secunia.com/advisories/22711	[email protected]
http://secunia.com/advisories/21930	[email protected]	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0073.html	[email protected]
http://www.vupen.com/english/advisories/2006/3453	[email protected]
http://www.vupen.com/english/advisories/2006/4206	[email protected]
http://www.vupen.com/english/advisories/2006/4207	[email protected]
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	[email protected]
http://openvpn.net/changelog.html	[email protected]
http://www.vupen.com/english/advisories/2006/3730	[email protected]
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html	[email protected]
http://secunia.com/advisories/24099	[email protected]
http://www.openbsd.org/errata.html	[email protected]
http://secunia.com/advisories/21846	[email protected]	Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml	[email protected]
http://securitytracker.com/id?1016791	[email protected]
https://issues.rpath.com/browse/RPL-1633	[email protected]
http://www.vupen.com/english/advisories/2006/4366	[email protected]
http://www.kb.cert.org/vuls/id/845620	[email protected]	US Government Resource
http://www.vupen.com/english/advisories/2007/1401	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml	[email protected]
http://secunia.com/advisories/21776	[email protected]	Vendor Advisory
http://secunia.com/advisories/26329	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/28755	[email protected]
http://www.vmware.com/support/server/doc/releasenotes_server.html	[email protected]
http://www.vupen.com/english/advisories/2006/4744	[email protected]
http://secunia.com/advisories/22733	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1	[email protected]
http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/	[email protected]
http://www.securityfocus.com/archive/1/445822/100/0/threaded	[email protected]
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144	[email protected]
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html	[email protected]
http://secunia.com/advisories/21812	[email protected]	Vendor Advisory
http://secunia.com/advisories/21906	[email protected]	Vendor Advisory
http://secunia.com/advisories/21927	[email protected]	Vendor Advisory
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html	[email protected]
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	[email protected]
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	[email protected]
http://secunia.com/advisories/22949	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177	[email protected]
http://www.vupen.com/english/advisories/2006/4750	[email protected]
http://www.vupen.com/english/advisories/2010/0366	[email protected]
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	[email protected]
http://www.serv-u.com/releasenotes/	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml	[email protected]
http://secunia.com/advisories/22036	[email protected]	Vendor Advisory
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540	[email protected]
http://secunia.com/advisories/28115	[email protected]
http://secunia.com/advisories/21873	[email protected]	Vendor Advisory
http://secunia.com/advisories/24950	[email protected]
http://www.securityfocus.com/bid/22083	[email protected]
http://secunia.com/advisories/22671	[email protected]
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html	[email protected]
http://secunia.com/advisories/23841	[email protected]
http://secunia.com/advisories/60799	[email protected]
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html	[email protected]
http://secunia.com/advisories/22758	[email protected]
http://secunia.com/advisories/22934	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1	[email protected]
http://www.vupen.com/english/advisories/2006/4327	[email protected]
http://secunia.com/advisories/21785	[email protected]	Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm	[email protected]
http://www.vupen.com/english/advisories/2006/3936	[email protected]
http://secunia.com/advisories/22446	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1	[email protected]
http://www.vmware.com/support/player/doc/releasenotes_player.html	[email protected]
http://secunia.com/advisories/26893	[email protected]
http://secunia.com/advisories/23680	[email protected]
http://secunia.com/advisories/23455	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:161	[email protected]
http://www.securityfocus.com/bid/28276	[email protected]
http://secunia.com/advisories/21852	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3566	[email protected]
http://www.vupen.com/english/advisories/2006/3899	[email protected]
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html	[email protected]
http://secunia.com/advisories/21870	[email protected]	Vendor Advisory
http://www.securityfocus.com/archive/1/489739/100/0/threaded	[email protected]
http://www.vupen.com/english/advisories/2007/0254	[email protected]
http://www.openoffice.org/security/cves/CVE-2006-4339.html	[email protected]
http://www.vupen.com/english/advisories/2006/3793	[email protected]
http://secunia.com/advisories/22259	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2783	[email protected]
http://secunia.com/advisories/23155	[email protected]
http://secunia.com/advisories/41818	[email protected]
http://secunia.com/advisories/21778	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2007/1815	[email protected]
https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html	[email protected]
http://www.securityfocus.com/bid/19849	[email protected]	Patch
http://secunia.com/advisories/22932	[email protected]
http://www.vupen.com/english/advisories/2006/4586	[email protected]
http://marc.info/?l=bugtraq&m=130497311408250&w=2	[email protected]
http://secunia.com/advisories/22509	[email protected]
http://www.ubuntu.com/usn/usn-339-1	[email protected]	Patch
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html	[email protected]
http://secunia.com/advisories/38568	[email protected]
http://secunia.com/advisories/22284	[email protected]
http://secunia.com/advisories/22585	[email protected]
http://www.novell.com/linux/security/advisories/2006_55_ssl.html	[email protected]
http://www.vupen.com/english/advisories/2007/4224	[email protected]
http://www.openssl.org/news/secadv_20060905.txt	[email protected]	PatchVendor Advisory
http://www.vupen.com/english/advisories/2008/0905/references	[email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495	[email protected]
http://secunia.com/advisories/21823	[email protected]	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1	[email protected]
http://secunia.com/advisories/22948	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1	[email protected]
http://www.us.debian.org/security/2006/dsa-1173	[email protected]	Patch
http://jvn.jp/en/jp/JVN51615542/index.html	[email protected]
http://secunia.com/advisories/22689	[email protected]
http://secunia.com/advisories/25399	[email protected]
http://www.vupen.com/english/advisories/2006/4205	[email protected]
http://www.sybase.com/detail?id=1047991	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1	[email protected]
http://secunia.com/advisories/22940	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:207	[email protected]
http://www.novell.com/linux/security/advisories/2006_61_opera.html	[email protected]
http://secunia.com/advisories/22523	[email protected]
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742	[email protected]
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html	[email protected]
http://www.vupen.com/english/advisories/2006/3748	[email protected]
http://support.attachmate.com/techdocs/2127.html	[email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771	[email protected]
http://secunia.com/advisories/22799	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1	[email protected]
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	[email protected]	US Government Resource
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	[email protected]
http://secunia.com/advisories/21791	[email protected]	Vendor Advisory
http://secunia.com/advisories/22161	[email protected]	Vendor Advisory

see all 400 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-310	Cryptographic Issues	[email protected]

Affected Products

Product	Versions
openssl openssl	<= 0.9.7 0.9.1c 0.9.2b 0.9.3 0.9.3a
CPE cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.3:::::::* cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.5:::::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:::::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:::::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:::::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6d:::::::* cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.8:::::::* cpe:2.3:a:openssl:openssl:0.9.8a:::::::* cpe:2.3:a:openssl:openssl:0.9.8b:::::::* Remediation No remediation found in references.

Product

Versions

openssl openssl

<= 0.9.7

0.9.1c

0.9.2b

0.9.3

0.9.3a

CPE

cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Oct 20, 2016	CVE Translated	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Nov 14, 2014	CVE Modified	[email protected]
Sep 5, 2006	Initial Analysis	[email protected]