Vulnerabilidades do Red Hat Red Hat Network Satellite Server v 5.1
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Red Hat Network Satellite Server v 5.1: 1 registro(s), com versões afetadas e correções.
CVE-2006-4339
Crítica · 9.1
CWE-347 05/09/2006
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.