vulnti.work

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 …

严重 CVSS 9.1
CVECVE-2006-4339
首次发现2026-10-30 18:15 UTC
披露时间2006-09-05 17:04 UTC
最后更新2026-10-30 18:15 UTC
通道状态auto

摘要

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

  • :

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD