Kritik CVSS 9.1

CVE-2006-4339: Openssl: güvenlik açığı

Yayın: 5 Eylül 2006 20:04 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

Özet bilgiler

Ürün: Openssl Openssl
CVSS v3.1: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: %3,95 (yüzdelik 90)
CWE: CWE-347
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
openssl-openssl	—	0.9.7	—
openssl-openssl	0.9.1c	0.9.1c	—
openssl-openssl	0.9.2b	0.9.2b	—
openssl-openssl	0.9.3	0.9.3	—
openssl-openssl	0.9.3a	0.9.3a	—
openssl-openssl	0.9.4	0.9.4	—
openssl-openssl	0.9.5	0.9.5	—
openssl-openssl	0.9.5	0.9.5	—
openssl-openssl	0.9.5	0.9.5	—
openssl-openssl	0.9.5a	0.9.5a	—
openssl-openssl	0.9.5a	0.9.5a	—
openssl-openssl	0.9.5a	0.9.5a	—
openssl-openssl	0.9.6	0.9.6	—
openssl-openssl	0.9.6	0.9.6	—
openssl-openssl	0.9.6	0.9.6	—
openssl-openssl	0.9.6	0.9.6	—
openssl-openssl	0.9.6a	0.9.6a	—
openssl-openssl	0.9.6a	0.9.6a	—
openssl-openssl	0.9.6a	0.9.6a	—
openssl-openssl	0.9.6a	0.9.6a	—
openssl-openssl	0.9.6b	0.9.6b	—
openssl-openssl	0.9.6c	0.9.6c	—
openssl-openssl	0.9.6d	0.9.6d	—
openssl-openssl	0.9.6e	0.9.6e	—
openssl-openssl	0.9.6f	0.9.6f	—
openssl-openssl	0.9.6g	0.9.6g	—
openssl-openssl	0.9.6h	0.9.6h	—
openssl-openssl	0.9.6i	0.9.6i	—
openssl-openssl	0.9.6j	0.9.6j	—
openssl-openssl	0.9.6k	0.9.6k	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları