Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-4339

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.

Published

2006-09-05T17:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-310

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	openssl	openssl	≤ 0.9.7	Yes
Application	openssl	openssl	0.9.1c	Yes
Application	openssl	openssl	0.9.2b	Yes
Application	openssl	openssl	0.9.3	Yes
Application	openssl	openssl	0.9.3a	Yes
Application	openssl	openssl	0.9.4	Yes
Application	openssl	openssl	0.9.5	Yes
Application	openssl	openssl	0.9.5	Yes
Application	openssl	openssl	0.9.5	Yes
Application	openssl	openssl	0.9.5a	Yes
Application	openssl	openssl	0.9.5a	Yes
Application	openssl	openssl	0.9.5a	Yes
Application	openssl	openssl	0.9.6	Yes
Application	openssl	openssl	0.9.6	Yes
Application	openssl	openssl	0.9.6	Yes
Application	openssl	openssl	0.9.6	Yes
Application	openssl	openssl	0.9.6a	Yes
Application	openssl	openssl	0.9.6a	Yes
Application	openssl	openssl	0.9.6a	Yes
Application	openssl	openssl	0.9.6a	Yes
Application	openssl	openssl	0.9.6b	Yes
Application	openssl	openssl	0.9.6c	Yes
Application	openssl	openssl	0.9.6d	Yes
Application	openssl	openssl	0.9.6e	Yes
Application	openssl	openssl	0.9.6f	Yes
Application	openssl	openssl	0.9.6g	Yes
Application	openssl	openssl	0.9.6h	Yes
Application	openssl	openssl	0.9.6i	Yes
Application	openssl	openssl	0.9.6j	Yes
Application	openssl	openssl	0.9.6k	Yes
Application	openssl	openssl	0.9.6l	Yes
Application	openssl	openssl	0.9.6m	Yes
Application	openssl	openssl	0.9.7a	Yes
Application	openssl	openssl	0.9.7b	Yes
Application	openssl	openssl	0.9.7c	Yes
Application	openssl	openssl	0.9.7d	Yes
Application	openssl	openssl	0.9.7e	Yes
Application	openssl	openssl	0.9.7f	Yes
Application	openssl	openssl	0.9.7g	Yes
Application	openssl	openssl	0.9.7h	Yes
Application	openssl	openssl	0.9.7i	Yes
Application	openssl	openssl	0.9.7j	Yes
Application	openssl	openssl	0.9.8	Yes
Application	openssl	openssl	0.9.8a	Yes
Application	openssl	openssl	0.9.8b	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc ([email protected])
http://dev2dev.bea.com/pub/advisory/238 ([email protected])
http://docs.info.apple.com/article.html?artnum=304829 ([email protected])
http://docs.info.apple.com/article.html?artnum=307177 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 ([email protected])
http://jvn.jp/en/jp/JVN51615542/index.html ([email protected])
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html ([email protected])
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html ([email protected])
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html ([email protected])
http://lists.vmware.com/pipermail/security-announce/2008/000008.html ([email protected])
http://marc.info/?l=bind-announce&m=116253119512445&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=130497311408250&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=130497311408250&w=2 ([email protected])
http://openvpn.net/changelog.html ([email protected])
http://secunia.com/advisories/21709 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21767 Vendor Advisory ([email protected])
http://secunia.com/advisories/21776 Vendor Advisory ([email protected])
http://secunia.com/advisories/21778 Vendor Advisory ([email protected])
http://secunia.com/advisories/21785 Vendor Advisory ([email protected])
http://secunia.com/advisories/21791 Vendor Advisory ([email protected])
http://secunia.com/advisories/21812 Vendor Advisory ([email protected])
http://secunia.com/advisories/21823 Vendor Advisory ([email protected])
http://secunia.com/advisories/21846 Vendor Advisory ([email protected])
http://secunia.com/advisories/21852 Vendor Advisory ([email protected])
http://secunia.com/advisories/21870 Vendor Advisory ([email protected])
http://secunia.com/advisories/21873 Vendor Advisory ([email protected])
http://secunia.com/advisories/21906 Vendor Advisory ([email protected])
http://secunia.com/advisories/21927 Vendor Advisory ([email protected])
http://secunia.com/advisories/21930 Vendor Advisory ([email protected])
http://secunia.com/advisories/21982 Vendor Advisory ([email protected])
http://secunia.com/advisories/22036 Vendor Advisory ([email protected])
http://secunia.com/advisories/22044 ([email protected])
http://secunia.com/advisories/22066 ([email protected])
http://secunia.com/advisories/22161 Vendor Advisory ([email protected])
http://secunia.com/advisories/22226 Vendor Advisory ([email protected])
http://secunia.com/advisories/22232 Vendor Advisory ([email protected])
http://secunia.com/advisories/22259 Vendor Advisory ([email protected])
http://secunia.com/advisories/22260 Vendor Advisory ([email protected])
http://secunia.com/advisories/22284 ([email protected])
http://secunia.com/advisories/22325 ([email protected])
http://secunia.com/advisories/22446 ([email protected])
http://secunia.com/advisories/22509 ([email protected])
http://secunia.com/advisories/22513 ([email protected])
http://secunia.com/advisories/22523 ([email protected])
http://secunia.com/advisories/22545 ([email protected])
http://secunia.com/advisories/22585 ([email protected])
http://secunia.com/advisories/22671 ([email protected])
http://secunia.com/advisories/22689 ([email protected])
http://secunia.com/advisories/22711 ([email protected])
http://secunia.com/advisories/22733 ([email protected])
http://secunia.com/advisories/22758 ([email protected])
http://secunia.com/advisories/22799 ([email protected])
http://secunia.com/advisories/22932 ([email protected])
http://secunia.com/advisories/22934 ([email protected])
http://secunia.com/advisories/22936 ([email protected])
http://secunia.com/advisories/22937 ([email protected])
http://secunia.com/advisories/22938 ([email protected])
http://secunia.com/advisories/22939 ([email protected])
http://secunia.com/advisories/22940 ([email protected])
http://secunia.com/advisories/22948 ([email protected])
http://secunia.com/advisories/22949 ([email protected])
http://secunia.com/advisories/23155 ([email protected])
http://secunia.com/advisories/23455 ([email protected])
http://secunia.com/advisories/23680 ([email protected])
http://secunia.com/advisories/23794 ([email protected])
http://secunia.com/advisories/23841 ([email protected])
http://secunia.com/advisories/23915 ([email protected])
http://secunia.com/advisories/24099 ([email protected])
http://secunia.com/advisories/24930 ([email protected])
http://secunia.com/advisories/24950 ([email protected])
http://secunia.com/advisories/25284 ([email protected])
http://secunia.com/advisories/25399 ([email protected])
http://secunia.com/advisories/25649 ([email protected])
http://secunia.com/advisories/26329 ([email protected])
http://secunia.com/advisories/26893 ([email protected])
http://secunia.com/advisories/28115 ([email protected])
http://secunia.com/advisories/31492 ([email protected])
http://secunia.com/advisories/38567 ([email protected])
http://secunia.com/advisories/38568 ([email protected])
http://secunia.com/advisories/41818 ([email protected])
http://secunia.com/advisories/60799 ([email protected])
http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc ([email protected])
http://security.gentoo.org/glsa/glsa-200609-05.xml ([email protected])
http://security.gentoo.org/glsa/glsa-200609-18.xml ([email protected])
http://securitytracker.com/id?1016791 ([email protected])
http://securitytracker.com/id?1017522 ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 ([email protected])
http://support.attachmate.com/techdocs/2127.html ([email protected])
http://support.attachmate.com/techdocs/2128.html ([email protected])
http://support.attachmate.com/techdocs/2137.html ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm ([email protected])
http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf ([email protected])
http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html ([email protected])
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html ([email protected])
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml ([email protected])
http://www.debian.org/security/2006/dsa-1174 Patch ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml ([email protected])
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html ([email protected])
http://www.kb.cert.org/vuls/id/845620 US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 ([email protected])
http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ ([email protected])
http://www.novell.com/linux/security/advisories/2006_26_sr.html ([email protected])
http://www.novell.com/linux/security/advisories/2006_55_ssl.html ([email protected])
http://www.novell.com/linux/security/advisories/2006_61_opera.html ([email protected])
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html ([email protected])
http://www.openbsd.org/errata.html ([email protected])
http://www.openoffice.org/security/cves/CVE-2006-4339.html ([email protected])
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html ([email protected])
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html ([email protected])
http://www.openssl.org/news/secadv_20060905.txt Patch, Vendor Advisory ([email protected])
http://www.opera.com/support/search/supsearch.dml?index=845 ([email protected])
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html ([email protected])
http://www.osvdb.org/28549 ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0661.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0062.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0072.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0073.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0629.html ([email protected])
http://www.securityfocus.com/archive/1/445231/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/445822/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/450327/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/450327/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/456546/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/489739/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/19849 Patch ([email protected])
http://www.securityfocus.com/bid/22083 ([email protected])
http://www.securityfocus.com/bid/28276 ([email protected])
http://www.serv-u.com/releasenotes/ ([email protected])
http://www.sybase.com/detail?id=1047991 ([email protected])
http://www.ubuntu.com/usn/usn-339-1 Patch ([email protected])
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource ([email protected])
http://www.us.debian.org/security/2006/dsa-1173 Patch ([email protected])
http://www.vmware.com/security/advisories/VMSA-2008-0005.html ([email protected])
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html ([email protected])
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html ([email protected])
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html ([email protected])
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html ([email protected])
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html ([email protected])
http://www.vmware.com/support/player/doc/releasenotes_player.html ([email protected])
http://www.vmware.com/support/player2/doc/releasenotes_player2.html ([email protected])
http://www.vmware.com/support/server/doc/releasenotes_server.html ([email protected])
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html ([email protected])
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html ([email protected])
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html ([email protected])
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html ([email protected])
http://www.vupen.com/english/advisories/2006/3453 ([email protected])
http://www.vupen.com/english/advisories/2006/3566 ([email protected])
http://www.vupen.com/english/advisories/2006/3730 ([email protected])
http://www.vupen.com/english/advisories/2006/3748 ([email protected])
http://www.vupen.com/english/advisories/2006/3793 ([email protected])
http://www.vupen.com/english/advisories/2006/3899 ([email protected])
http://www.vupen.com/english/advisories/2006/3936 ([email protected])
http://www.vupen.com/english/advisories/2006/4205 ([email protected])
http://www.vupen.com/english/advisories/2006/4206 ([email protected])
http://www.vupen.com/english/advisories/2006/4207 ([email protected])
http://www.vupen.com/english/advisories/2006/4216 ([email protected])
http://www.vupen.com/english/advisories/2006/4327 ([email protected])
http://www.vupen.com/english/advisories/2006/4329 ([email protected])
http://www.vupen.com/english/advisories/2006/4366 ([email protected])
http://www.vupen.com/english/advisories/2006/4417 ([email protected])
http://www.vupen.com/english/advisories/2006/4586 ([email protected])
http://www.vupen.com/english/advisories/2006/4744 ([email protected])
http://www.vupen.com/english/advisories/2006/4750 ([email protected])
http://www.vupen.com/english/advisories/2006/5146 ([email protected])
http://www.vupen.com/english/advisories/2007/0254 ([email protected])
http://www.vupen.com/english/advisories/2007/0343 ([email protected])
http://www.vupen.com/english/advisories/2007/1401 ([email protected])
http://www.vupen.com/english/advisories/2007/1815 ([email protected])
http://www.vupen.com/english/advisories/2007/1945 ([email protected])
http://www.vupen.com/english/advisories/2007/2163 ([email protected])
http://www.vupen.com/english/advisories/2007/2315 ([email protected])
http://www.vupen.com/english/advisories/2007/2783 ([email protected])
http://www.vupen.com/english/advisories/2007/4224 ([email protected])
http://www.vupen.com/english/advisories/2008/0905/references ([email protected])
http://www.vupen.com/english/advisories/2010/0366 ([email protected])
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 ([email protected])
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 ([email protected])
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 ([email protected])
https://issues.rpath.com/browse/RPL-1633 ([email protected])
https://issues.rpath.com/browse/RPL-616 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 ([email protected])
https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html ([email protected])
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 ([email protected])
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 ([email protected])
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 ([email protected])
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
http://dev2dev.bea.com/pub/advisory/238 (af854a3a-2127-422b-91ae-364da2661108)
http://docs.info.apple.com/article.html?artnum=304829 (af854a3a-2127-422b-91ae-364da2661108)
http://docs.info.apple.com/article.html?artnum=307177 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 (af854a3a-2127-422b-91ae-364da2661108)
http://jvn.jp/en/jp/JVN51615542/index.html (af854a3a-2127-422b-91ae-364da2661108)
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.vmware.com/pipermail/security-announce/2008/000008.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bind-announce&m=116253119512445&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=130497311408250&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=130497311408250&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://openvpn.net/changelog.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21709 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21767 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21776 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21778 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21785 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21791 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21812 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21823 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21846 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21852 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21870 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21873 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21906 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21927 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21930 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21982 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22036 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22044 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22066 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22161 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22226 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22232 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22259 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22260 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22284 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22325 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22446 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22509 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22513 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22523 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22545 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22585 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22671 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22689 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22711 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22733 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22758 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22799 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22932 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22934 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22936 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22937 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22938 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22939 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22940 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22948 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22949 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23155 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23455 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23680 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23794 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23841 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23915 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24099 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24930 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24950 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25284 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25399 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25649 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26329 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26893 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28115 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31492 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/38567 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/38568 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/41818 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/60799 (af854a3a-2127-422b-91ae-364da2661108)
http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200609-05.xml (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200609-18.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016791 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017522 (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 (af854a3a-2127-422b-91ae-364da2661108)
http://support.attachmate.com/techdocs/2127.html (af854a3a-2127-422b-91ae-364da2661108)
http://support.attachmate.com/techdocs/2128.html (af854a3a-2127-422b-91ae-364da2661108)
http://support.attachmate.com/techdocs/2137.html (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm (af854a3a-2127-422b-91ae-364da2661108)
http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf (af854a3a-2127-422b-91ae-364da2661108)
http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1174 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/845620 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 (af854a3a-2127-422b-91ae-364da2661108)
http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_26_sr.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_55_ssl.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_61_opera.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openbsd.org/errata.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openoffice.org/security/cves/CVE-2006-4339.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openssl.org/news/secadv_20060905.txt Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.opera.com/support/search/supsearch.dml?index=845 (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/28549 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0661.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0062.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0072.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0073.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0629.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/445231/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/445822/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/450327/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/450327/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/456546/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/489739/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19849 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/22083 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28276 (af854a3a-2127-422b-91ae-364da2661108)
http://www.serv-u.com/releasenotes/ (af854a3a-2127-422b-91ae-364da2661108)
http://www.sybase.com/detail?id=1047991 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-339-1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.us.debian.org/security/2006/dsa-1173 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2008-0005.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/player/doc/releasenotes_player.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/player2/doc/releasenotes_player2.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/server/doc/releasenotes_server.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3453 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3566 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3730 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3748 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3793 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3899 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3936 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4205 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4206 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4207 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4216 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4327 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4329 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4366 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4417 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4586 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4744 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4750 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/5146 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0254 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0343 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1401 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1815 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1945 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2163 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2315 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2783 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/4224 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0905/references (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/0366 (af854a3a-2127-422b-91ae-364da2661108)
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (af854a3a-2127-422b-91ae-364da2661108)
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-1633 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-616 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 (af854a3a-2127-422b-91ae-364da2661108)
https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html (af854a3a-2127-422b-91ae-364da2661108)
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (af854a3a-2127-422b-91ae-364da2661108)
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (af854a3a-2127-422b-91ae-364da2661108)
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (af854a3a-2127-422b-91ae-364da2661108)
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (af854a3a-2127-422b-91ae-364da2661108)