Skip to main content
UNPWNED
Scan free
CVE Radar
CriticalOpenSSL

CVE-2006-4339

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

CVSS Base Score
9.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploit Probability
90%EPSS PERCENTILE0100

More exploitable than 90% of all CVEs · Top 10%

Is your site exposed to this?

Run a free scan. UNPWNED fingerprints your stack and flags this CVE class if the affected technology is detected.

Check my site
Details
Published
2006-09-05
Last modified
2026-10-30
Affected
OpenSSL
References
NVD Detail OSV.dev GitHub Advisories

Related exploited CVEs in OpenSSL

CVE-2015-0204
Medium · 4.3 CVSSOpenSSL
CVE-2022-2068
High · 7.3 CVSSOpenSSL
CVE-2021-3711
Critical · 9.8 CVSSOpenSSL
CVE-2022-1292
High · 7.3 CVSSOpenSSL

Data from the National Vulnerability Database (NVD), CISA KEV, and FIRST.org EPSS. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS is a probability estimate, not a guarantee of exploitation.