# CVE-2006-4339: Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

Status: published. Published: 2006-09-05. Updated: 2026-11-04.

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.

## Remediation

- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. (source: CNA: redhat)

## Affected products and versions

- Red Hat / Red Hat Enterprise Linux 3 (openssl): ≥ 0:0.9.7a-33.18; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 3 (openssl096b): ≥ 0:0.9.6b-16.43; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 4 (openssl): ≥ 0:0.9.7a-43.11; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 4 (openssl096b): ≥ 0:0.9.6b-22.43; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 4.2 (rhn-solaris-bootstrap): ≥ 0:5.0.2-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 4.2 (rhn_solaris_bootstrap_5_0_2_3): ≥ 0:1-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 4.2 (RHEL3) (rhn-solaris-bootstrap): ≥ 0:5.0.2-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 4.2 (RHEL3) (rhn_solaris_bootstrap_5_0_2_3): ≥ 0:1-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.0 (rhn-solaris-bootstrap): ≥ 0:5.0.2-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.0 (rhn_solaris_bootstrap_5_0_2_3): ≥ 0:1-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.1 (rhn-solaris-bootstrap): ≥ 0:5.1.1-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Network Satellite Server v 5.1 (rhn_solaris_bootstrap_5_1_1_3): ≥ 0:1-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (edk2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (shim): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (shim-unsigned-aarch64): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (shim-unsigned-x64): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 6 (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (ovmf): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (compat-openssl10): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (edk2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (mingw-openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (shim): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (shim-unsigned-x64): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (compat-openssl11): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (edk2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (shim): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (shim-unsigned-aarch64): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (shim-unsigned-x64): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat JBoss Core Services (openssl): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift/ose-rhel-coreos-8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift/ose-rhel-coreos-9): Version range not reported. Source: CNA: redhat

## Severity and prioritization

- CVSS 3.1: 9.1 (critical); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N; source: CNA: redhat

- CISA KEV: No listing in collected sources

- EPSS: 3.95% as of 2026-11-04; percentile 90.44%

- SSVC: Not available

- Weaknesses: CWE-347

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- http://dev2dev.bea.com/pub/advisory/238 (CNA: redhat)

- http://docs.info.apple.com/article.html?artnum=304829 (CNA: redhat)

- http://docs.info.apple.com/article.html?artnum=307177 (CNA: redhat)

- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 (CNA: redhat)

- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 (CNA: redhat)

- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 (CNA: redhat)

- http://jvn.jp/en/jp/JVN51615542/index.html (CNA: redhat)

- http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html (CNA: redhat)

- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html (CNA: redhat)

- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html (CNA: redhat)

- http://lists.vmware.com/pipermail/security-announce/2008/000008.html (CNA: redhat)

- http://marc.info/?l=bind-announce&m=116253119512445&w=2 (CNA: redhat)

- http://marc.info/?l=bugtraq&m=130497311408250&w=2 (CNA: redhat)

- http://openvpn.net/changelog.html (CNA: redhat)

- http://secunia.com/advisories/21709 (CNA: redhat)

- http://secunia.com/advisories/21767 (CNA: redhat)

- http://secunia.com/advisories/21776 (CNA: redhat)

- http://secunia.com/advisories/21778 (CNA: redhat)

- http://secunia.com/advisories/21785 (CNA: redhat)

- http://secunia.com/advisories/21791 (CNA: redhat)

- http://secunia.com/advisories/21812 (CNA: redhat)

- http://secunia.com/advisories/21823 (CNA: redhat)

- http://secunia.com/advisories/21846 (CNA: redhat)

- http://secunia.com/advisories/21852 (CNA: redhat)

- http://secunia.com/advisories/21870 (CNA: redhat)

- http://secunia.com/advisories/21873 (CNA: redhat)

- http://secunia.com/advisories/21906 (CNA: redhat)

- http://secunia.com/advisories/21927 (CNA: redhat)

- http://secunia.com/advisories/21930 (CNA: redhat)

- http://secunia.com/advisories/21982 (CNA: redhat)

- http://secunia.com/advisories/22036 (CNA: redhat)

- http://secunia.com/advisories/22044 (CNA: redhat)

- http://secunia.com/advisories/22066 (CNA: redhat)

- http://secunia.com/advisories/22161 (CNA: redhat)

- http://secunia.com/advisories/22226 (CNA: redhat)

- http://secunia.com/advisories/22232 (CNA: redhat)

- http://secunia.com/advisories/22259 (CNA: redhat)

- http://secunia.com/advisories/22260 (CNA: redhat)

- http://secunia.com/advisories/22284 (CNA: redhat)

- http://secunia.com/advisories/22325 (CNA: redhat)

- http://secunia.com/advisories/22446 (CNA: redhat)

- http://secunia.com/advisories/22509 (CNA: redhat)

- http://secunia.com/advisories/22513 (CNA: redhat)

- http://secunia.com/advisories/22523 (CNA: redhat)

- http://secunia.com/advisories/22545 (CNA: redhat)

- http://secunia.com/advisories/22585 (CNA: redhat)

- http://secunia.com/advisories/22671 (CNA: redhat)

- http://secunia.com/advisories/22689 (CNA: redhat)

- http://secunia.com/advisories/22711 (CNA: redhat)

- http://secunia.com/advisories/22733 (CNA: redhat)

- http://secunia.com/advisories/22758 (CNA: redhat)

- http://secunia.com/advisories/22799 (CNA: redhat)

- http://secunia.com/advisories/22932 (CNA: redhat)

- http://secunia.com/advisories/22934 (CNA: redhat)

- http://secunia.com/advisories/22936 (CNA: redhat)

- http://secunia.com/advisories/22937 (CNA: redhat)

- http://secunia.com/advisories/22938 (CNA: redhat)

- http://secunia.com/advisories/22939 (CNA: redhat)

- http://secunia.com/advisories/22940 (CNA: redhat)

- http://secunia.com/advisories/22948 (CNA: redhat)

- http://secunia.com/advisories/22949 (CNA: redhat)

- http://secunia.com/advisories/23155 (CNA: redhat)

- http://secunia.com/advisories/23455 (CNA: redhat)

- http://secunia.com/advisories/23680 (CNA: redhat)

- http://secunia.com/advisories/23794 (CNA: redhat)

- http://secunia.com/advisories/23841 (CNA: redhat)

- http://secunia.com/advisories/23915 (CNA: redhat)

- http://secunia.com/advisories/24099 (CNA: redhat)

- http://secunia.com/advisories/24930 (CNA: redhat)

- http://secunia.com/advisories/24950 (CNA: redhat)

- http://secunia.com/advisories/25284 (CNA: redhat)

- http://secunia.com/advisories/25399 (CNA: redhat)

- http://secunia.com/advisories/25649 (CNA: redhat)

- http://secunia.com/advisories/26329 (CNA: redhat)

- http://secunia.com/advisories/26893 (CNA: redhat)

- http://secunia.com/advisories/28115 (CNA: redhat)

- http://secunia.com/advisories/31492 (CNA: redhat)

- http://secunia.com/advisories/38567 (CNA: redhat)

- http://secunia.com/advisories/38568 (CNA: redhat)

- http://secunia.com/advisories/41818 (CNA: redhat)

- http://secunia.com/advisories/60799 (CNA: redhat)

- http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc (CNA: redhat)

- http://security.gentoo.org/glsa/glsa-200609-05.xml (CNA: redhat)

- http://security.gentoo.org/glsa/glsa-200609-18.xml (CNA: redhat)

- http://securitytracker.com/id?1016791 (CNA: redhat)

- http://securitytracker.com/id?1017522 (CNA: redhat)

- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 (CNA: redhat)

- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 (CNA: redhat)

- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 (CNA: redhat)

- http://support.attachmate.com/techdocs/2127.html (CNA: redhat)

- http://support.attachmate.com/techdocs/2128.html (CNA: redhat)

- http://support.attachmate.com/techdocs/2137.html (CNA: redhat)

- http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm (CNA: redhat)

- http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf (CNA: redhat)

- http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html (CNA: redhat)

- http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html (CNA: redhat)

- http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml (CNA: redhat)

- http://www.debian.org/security/2006/dsa-1174 (CNA: redhat)

- http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml (CNA: redhat)

- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml (CNA: redhat)

- http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html (CNA: redhat)

- http://www.kb.cert.org/vuls/id/845620 (CNA: redhat)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 (CNA: redhat)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 (CNA: redhat)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 (CNA: redhat)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 (CNA: redhat)

- http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ (CNA: redhat)

- http://www.novell.com/linux/security/advisories/2006_26_sr.html (CNA: redhat)

- http://www.novell.com/linux/security/advisories/2006_55_ssl.html (CNA: redhat)

- http://www.novell.com/linux/security/advisories/2006_61_opera.html (CNA: redhat)

- http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html (CNA: redhat)

- http://www.openbsd.org/errata.html (CNA: redhat)

- http://www.openoffice.org/security/cves/CVE-2006-4339.html (CNA: redhat)

- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html (CNA: redhat)

- http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html (CNA: redhat)

- http://www.openssl.org/news/secadv_20060905.txt (CNA: redhat)

- http://www.opera.com/support/search/supsearch.dml?index=845 (CNA: redhat)

- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html (CNA: redhat)

- http://www.osvdb.org/28549 (CNA: redhat)

- http://www.redhat.com/support/errata/RHSA-2006-0661.html (CNA: redhat)

- http://www.redhat.com/support/errata/RHSA-2007-0062.html (CNA: redhat)

- http://www.redhat.com/support/errata/RHSA-2007-0072.html (CNA: redhat)

- http://www.redhat.com/support/errata/RHSA-2007-0073.html (CNA: redhat)

- http://www.redhat.com/support/errata/RHSA-2008-0629.html (CNA: redhat)

- http://www.securityfocus.com/archive/1/445231/100/0/threaded (CNA: redhat)

- http://www.securityfocus.com/archive/1/445822/100/0/threaded (CNA: redhat)

- http://www.securityfocus.com/archive/1/450327/100/0/threaded (CNA: redhat)

- http://www.securityfocus.com/archive/1/456546/100/200/threaded (CNA: redhat)

- http://www.securityfocus.com/archive/1/489739/100/0/threaded (CNA: redhat)

- http://www.securityfocus.com/bid/19849 (CNA: redhat)

- http://www.securityfocus.com/bid/22083 (CNA: redhat)

- http://www.securityfocus.com/bid/28276 (CNA: redhat)

- http://www.serv-u.com/releasenotes/ (CNA: redhat)

- http://www.sybase.com/detail?id=1047991 (CNA: redhat)

- http://www.ubuntu.com/usn/usn-339-1 (CNA: redhat)

- http://www.us-cert.gov/cas/techalerts/TA06-333A.html (CNA: redhat)

- http://www.us.debian.org/security/2006/dsa-1173 (CNA: redhat)

- http://www.vmware.com/security/advisories/VMSA-2008-0005.html (CNA: redhat)

- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html (CNA: redhat)

- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html (CNA: redhat)

- http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html (CNA: redhat)

- http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html (CNA: redhat)

- http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html (CNA: redhat)

- http://www.vmware.com/support/player/doc/releasenotes_player.html (CNA: redhat)

- http://www.vmware.com/support/player2/doc/releasenotes_player2.html (CNA: redhat)

- http://www.vmware.com/support/server/doc/releasenotes_server.html (CNA: redhat)

- http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (CNA: redhat)

- http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (CNA: redhat)

- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html (CNA: redhat)

- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3453 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3566 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3730 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3748 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3793 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3899 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/3936 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4205 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4206 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4207 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4216 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4327 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4329 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4366 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4417 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4586 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4744 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/4750 (CNA: redhat)

- http://www.vupen.com/english/advisories/2006/5146 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/0254 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/0343 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/1401 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/1815 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/1945 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/2163 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/2315 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/2783 (CNA: redhat)

- http://www.vupen.com/english/advisories/2007/4224 (CNA: redhat)

- http://www.vupen.com/english/advisories/2008/0905/references (CNA: redhat)

- http://www.vupen.com/english/advisories/2010/0366 (CNA: redhat)

- http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (CNA: redhat)

- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 (CNA: redhat)

- https://access.redhat.com/errata/RHSA-2006:0661 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2007:0062 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2007:0072 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2007:0073 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2008:0264 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2008:0525 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2008:0629 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2006-4339 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 (CNA: redhat)

- https://issues.rpath.com/browse/RPL-1633 (CNA: redhat)

- https://issues.rpath.com/browse/RPL-616 (CNA: redhat)

- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 (CNA: redhat)

- https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html (CNA: redhat)

- https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (CNA: redhat)

- http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ (ADP: CVE; x_refsource_MISC, x_transferred)

- http://www.vupen.com/english/advisories/2006/4750 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://www.vupen.com/english/advisories/2006/3453 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/23915 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://jvn.jp/en/jp/JVN51615542/index.html (ADP: CVE; third-party-advisory, x_refsource_JVN, x_transferred)

- http://docs.info.apple.com/article.html?artnum=307177 (ADP: CVE; x_refsource_MISC, x_transferred)

- http://secunia.com/advisories/60799 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.osvdb.org/28549 (ADP: CVE; vdb-entry, x_refsource_OSVDB, x_transferred)

- http://www.vupen.com/english/advisories/2006/4366 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22932 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/3748 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/21791 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml (ADP: CVE; vendor-advisory, x_refsource_GENTOO, x_transferred)

- http://secunia.com/advisories/26893 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.openssl.org/news/secadv_20060905.txt (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/22509 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 (ADP: CVE; vendor-advisory, x_refsource_MANDRIVA, x_transferred)

- http://www.redhat.com/support/errata/RHSA-2006-0661.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://www.novell.com/linux/security/advisories/2006_61_opera.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://secunia.com/advisories/21930 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22940 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://secunia.com/advisories/21852 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://dev2dev.bea.com/pub/advisory/238 (ADP: CVE; vendor-advisory, x_refsource_BEA, x_transferred)

- http://secunia.com/advisories/21823 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://secunia.com/advisories/22758 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22938 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/3899 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22044 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2007/1945 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.redhat.com/support/errata/RHSA-2007-0062.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html (ADP: CVE; vendor-advisory, x_refsource_OPENPKG, x_transferred)

- http://www.vupen.com/english/advisories/2006/4206 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vupen.com/english/advisories/2006/3730 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://secunia.com/advisories/21812 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22523 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/archive/1/450327/100/0/threaded (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://secunia.com/advisories/22689 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://docs.info.apple.com/article.html?artnum=304829 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/23794 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://marc.info/?l=bugtraq&m=130497311408250&w=2 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://security.gentoo.org/glsa/glsa-200609-05.xml (ADP: CVE; vendor-advisory, x_refsource_GENTOO, x_transferred)

- http://secunia.com/advisories/22711 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/archive/1/445231/100/0/threaded (ADP: CVE; mailing-list, x_refsource_BUGTRAQ, x_transferred)

- http://secunia.com/advisories/23680 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://openvpn.net/changelog.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/server/doc/releasenotes_server.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.openbsd.org/errata.html (ADP: CVE; vendor-advisory, x_refsource_OPENBSD, x_transferred)

- http://secunia.com/advisories/22733 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- https://issues.rpath.com/browse/RPL-1633 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/22949 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 (ADP: CVE; vendor-advisory, x_refsource_SLACKWARE, x_transferred)

- http://www.ubuntu.com/usn/usn-339-1 (ADP: CVE; vendor-advisory, x_refsource_UBUNTU, x_transferred)

- http://www.vupen.com/english/advisories/2006/3566 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.novell.com/linux/security/advisories/2006_26_sr.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://secunia.com/advisories/22446 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22939 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/24099 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/archive/1/445822/100/0/threaded (ADP: CVE; mailing-list, x_refsource_BUGTRAQ, x_transferred)

- http://secunia.com/advisories/25284 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/bid/22083 (ADP: CVE; vdb-entry, x_refsource_BID, x_transferred)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 (ADP: CVE; vendor-advisory, x_refsource_MANDRIVA, x_transferred)

- http://securitytracker.com/id?1016791 (ADP: CVE; vdb-entry, x_refsource_SECTRACK, x_transferred)

- http://secunia.com/advisories/25649 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2010/0366 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22671 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html (ADP: CVE; mailing-list, x_refsource_MLIST, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://secunia.com/advisories/21785 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vmware.com/support/player2/doc/releasenotes_player2.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/31492 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/4329 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.us.debian.org/security/2006/dsa-1173 (ADP: CVE; vendor-advisory, x_refsource_DEBIAN, x_transferred)

- http://secunia.com/advisories/38567 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22284 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/24930 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/4327 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 (ADP: CVE; vendor-advisory, x_refsource_MANDRIVA, x_transferred)

- http://secunia.com/advisories/21778 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.redhat.com/support/errata/RHSA-2008-0629.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html (ADP: CVE; vendor-advisory, x_refsource_APPLE, x_transferred)

- http://www.vupen.com/english/advisories/2007/2163 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/26329 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22260 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vupen.com/english/advisories/2007/0343 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/player/doc/releasenotes_player.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/21982 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://support.attachmate.com/techdocs/2137.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://issues.rpath.com/browse/RPL-616 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://support.attachmate.com/techdocs/2127.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml (ADP: CVE; vendor-advisory, x_refsource_GENTOO, x_transferred)

- http://www.debian.org/security/2006/dsa-1174 (ADP: CVE; vendor-advisory, x_refsource_DEBIAN, x_transferred)

- http://secunia.com/advisories/23155 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://www.openoffice.org/security/cves/CVE-2006-4339.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/22799 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/4207 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vupen.com/english/advisories/2006/4417 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.sybase.com/detail?id=1047991 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/21873 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.redhat.com/support/errata/RHSA-2007-0072.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html (ADP: CVE; third-party-advisory, x_refsource_JVNDB, x_transferred)

- http://www.serv-u.com/releasenotes/ (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vupen.com/english/advisories/2006/4744 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/38568 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/21846 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vupen.com/english/advisories/2007/0254 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://www.vupen.com/english/advisories/2007/4224 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22161 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://marc.info/?l=bind-announce&m=116253119512445&w=2 (ADP: CVE; mailing-list, x_refsource_MLIST, x_transferred)

- http://secunia.com/advisories/22937 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22325 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://www.vupen.com/english/advisories/2007/2315 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.opera.com/support/search/supsearch.dml?index=845 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html (ADP: CVE; vendor-advisory, x_refsource_APPLE, x_transferred)

- http://secunia.com/advisories/21767 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2007/1815 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22232 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.us-cert.gov/cas/techalerts/TA06-333A.html (ADP: CVE; third-party-advisory, x_refsource_CERT, x_transferred)

- http://secunia.com/advisories/21906 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/archive/1/489739/100/0/threaded (ADP: CVE; mailing-list, x_refsource_BUGTRAQ, x_transferred)

- http://lists.vmware.com/pipermail/security-announce/2008/000008.html (ADP: CVE; mailing-list, x_refsource_MLIST, x_transferred)

- http://secunia.com/advisories/22934 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.redhat.com/support/errata/RHSA-2007-0073.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://secunia.com/advisories/22585 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/25399 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2008/0905/references (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vupen.com/english/advisories/2007/1401 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 (ADP: CVE; vdb-entry, x_refsource_XF, x_transferred)

- http://secunia.com/advisories/22513 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/41818 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://support.attachmate.com/techdocs/2128.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 (ADP: CVE; vdb-entry, signature, x_refsource_OVAL, x_transferred)

- http://www.vmware.com/security/advisories/VMSA-2008-0005.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://secunia.com/advisories/21776 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc (ADP: CVE; vendor-advisory, x_refsource_FREEBSD, x_transferred)

- http://secunia.com/advisories/23455 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/archive/1/456546/100/200/threaded (ADP: CVE; mailing-list, x_refsource_BUGTRAQ, x_transferred)

- http://secunia.com/advisories/28115 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22226 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/3936 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22066 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22936 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html (ADP: CVE; vendor-advisory, x_refsource_OPENPKG, x_transferred)

- http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 (ADP: CVE; vendor-advisory, x_refsource_MANDRIVA, x_transferred)

- http://secunia.com/advisories/22545 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://securitytracker.com/id?1017522 (ADP: CVE; vdb-entry, x_refsource_SECTRACK, x_transferred)

- http://secunia.com/advisories/22948 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html (ADP: CVE; vendor-advisory, x_refsource_CISCO, x_transferred)

- http://secunia.com/advisories/23841 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/4205 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vupen.com/english/advisories/2007/2783 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/22259 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://secunia.com/advisories/22036 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://www.vupen.com/english/advisories/2006/4586 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/21927 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.novell.com/linux/security/advisories/2006_55_ssl.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.vupen.com/english/advisories/2006/5146 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://secunia.com/advisories/21870 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.vupen.com/english/advisories/2006/4216 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.vupen.com/english/advisories/2006/3793 (ADP: CVE; vdb-entry, x_refsource_VUPEN, x_transferred)

- http://www.securityfocus.com/bid/28276 (ADP: CVE; vdb-entry, x_refsource_BID, x_transferred)

- http://secunia.com/advisories/21709 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.kb.cert.org/vuls/id/845620 (ADP: CVE; third-party-advisory, x_refsource_CERT-VN, x_transferred)

- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 (ADP: CVE; vendor-advisory, x_refsource_SLACKWARE, x_transferred)

- http://security.gentoo.org/glsa/glsa-200609-18.xml (ADP: CVE; vendor-advisory, x_refsource_GENTOO, x_transferred)

- http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml (ADP: CVE; vendor-advisory, x_refsource_CISCO, x_transferred)

- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 (ADP: CVE; vendor-advisory, x_refsource_SUNALERT, x_transferred)

- http://secunia.com/advisories/24950 (ADP: CVE; third-party-advisory, x_refsource_SECUNIA, x_transferred)

- http://www.securityfocus.com/bid/19849 (ADP: CVE; vdb-entry, x_refsource_BID, x_transferred)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2006-4339; retrieved 2026-11-04; source updated 2026-11-04

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2006-4339; retrieved 2026-11-04; source updated Not reported

Revision: 0fd1bb1ef0eceb1567042586cc5def5d7374de306971efaa875af85150147aca

Canonical: https://y2.dev/cve/CVE-2006-4339

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.