cve/2006/CVE-2006-4339.md

CVE-2006-4339

Description

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.

POC

Reference

• http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
• http://www.redhat.com/support/errata/RHSA-2007-0073.html
• http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
• http://www.vmware.com/support/player/doc/releasenotes_player.html
• http://www.vmware.com/support/player2/doc/releasenotes_player2.html
• http://www.vmware.com/support/server/doc/releasenotes_server.html
• http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
• http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/chnzzh/OpenSSL-CVE-lib