MediumOpenSSL could allow a remote attacker to bypass security restrictions caused by an improper validation of certain signatures. If an RSA key with exponent 3 is used, a remote attacker could forge a PKCS #1 v1.5 signature and certificate signed by that key. A remote attacker could exploit this vulnerability to bypass security restrictions and gain unauthorized access.
Upgrade to the latest version of OpenSSL (0.9.7j or 0.9.8b or later), as listed in OpenSSL Security Advisory [11 October 2005]. See References.
For Sybase:
Refer to Sybase Advisory 1047991 for patch, upgrade, or suggested workaround information. See References.
For Ubuntu Linux:
Refer to USN-339-1 for patch, upgrade, or workaround information. See References.
For Debian GNU/Linux:
Refer to DSA-1173-1 for patch, upgrade, or suggested workaround information. See References.
For Red Hat Linux:
Refer to RHSA-2006:0661-8 for patch, upgrade, or suggested workaround information. See References.
For Red Hat Linux (java-ibm):
Refer to RHSA-2007:0073-2 or RHSA-2007:0062 for patch, upgrade, or suggested workaround information. See References.
For Red Hat Linux (IBMJava2-JRE):
Refer to RHSA-2007:0072-2 for patch, upgrade, or suggested workaround information. See References.
For Gentoo Linux (Opera):
Refer to Gentoo Linux Security Announcement GLSA 200609-18 for patch, upgrade, or suggested workaround information. See References.
For Gentoo Linux (x86 emulation base libraries for AMD64):
Refer to Gentoo Linux Security Announcement GLSA 200609-05 for patch, upgrade, or suggested workaround information. See References.
For Gentoo Linux (NSS):
Refer to Gentoo Linux Security Announcement GLSA 200610-05 for patch, upgrade, or suggested workaround information. See References.
For Solaris (multiple applications):
Refer to Sun Alert ID: 102648 for patch, upgrade, or suggested workaround information. See References.
For Sun Secure Global Desktop:
Refer to Sun Alert ID: 102657 for patch, upgrade, or suggested workaround information. See References.
For Java Enterprise System:
Refer to Sun Alert ID: 102656 for patch, upgrade, or suggested workaround information. See References.
For Java 2 Platform, Standard Edition:
Refer to Sun Alert ID: 102686 for patch, upgrade, or suggested workaround information. See References.
For Solaris (for libike Library applications):
Refer to Sun Alert ID: 102722 for patch, upgrade, or suggested workaround information. See References.
For Solaris (for WAN Boot):
Refer to Sun Alert ID: 102759 for patch, upgrade, or suggested workaround information. See References.
For Cisco:
Refer to cisco-sr-20061108-openssl for upgrade information. See References.
For Mandriva Linux:
Refer to Mandriva Security Advisory MDKSA-2006:207 for patch, upgrade, or suggested workaround information. See References.
For Apple Mac OS X:
Apply Apple Security Update 2006-007, available from the Apple Web site. See References.
For NetBSD:
Refer to NetBSD Security Advisory 2006-023 for patch, upgrade, or suggested workaround information. See References.
For VMware Workstation:
Upgrade to the latest version of VMware Workstation (6.0.3 or later), available from the VMware Workstation Web site. See References.
For VMware Server:
Upgrade to the latest version of VMware Server (1.0.5 or later), available from the VMware Server Web site. See References.
For SUSE Linux:
Refer to SUSE-SA:2007:010 Security Announcement for patch, upgrade, or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE-SA:2006:054 for patch, upgrade, or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE-SA:2006:055 for patch, upgrade, or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE-SA:2006:061 for patch, upgrade, or suggested workaround information. See References.
For BEA WebLogic Server and Express:
Refer to BEA07-169.00 for patch, upgrade, or suggested workaround information. See References.
For Novell International Crypotographic Infrastructure (NICI):
Refer to Novell Security Alert 3590033 for patch, upgrade, or suggested workaround information. See References.
For HP-UX (bind):
Refer to HPSBUX02219 SSRT061273 for patch, upgrade, or suggested workaround information. See References.
For HP System Management Homepage:
Refer to HPSBMA02250 SSRT061275 rev.1 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Apply the appropriate update for your system. See References.
USN-339-1
openssl vulnerability
http://www.ubuntu.com/usn/usn-339-1
SA21709
OpenSSL RSA Signature Forgery Vulnerability
http://secunia.com/advisories/21709/
SecurityTracker Alert ID: 1016791
OpenSSL RSA Signatures Can Be Forged
http://securitytracker.com/alerts/2006/Sep/1016791.html
OpenSSL Security Advisory [5th September 2006]
RSA Signature Forgery (CVE-2006-4339)
http://www.openssl.org/news/secadv_20060905.txt
Full-Disclosure Mailing List, Tue Sep 5 15:22:20 BST 2006
[SECURITY] OpenSSL 0.9.8c and 0.9.7k released
http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0048.html
OpenSSL Web site
OpenSSL:The Open Source toolkit for SSL/TLS
http://www.openssl.org/
GLSA 200609-05
OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
http://www.gentoo.org/security/en/glsa/glsa-200609-05.xml
DSA-1173-1
openssl -- Cryptographic weakness
http://www.debian.org/security/2006/dsa-1173
US-CERT Vulnerability Note VU#845620
Multiple RSA implementations fail to properly handle signatures
http://www.kb.cert.org/vuls/id/845620
RHSA-2006:0661-8
Important: openssl security update
https://rhn.redhat.com/errata/RHSA-2006-0661.html
BugTraq Mailing List, Thu Sep 14 2006 - 04:01:28 CDT
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
http://archives.neohapsis.com/archives/bugtraq/2006-09/0231.html
MFSA 2006-60
RSA Signature Forgery
http://www.mozilla.org/security/announce/2006/mfsa2006-60.html
Sun Alert ID: 102648
Security Vulnerability in RSA Signature Verification Impacting Multiple SUN Products
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
SA22226
Sun Solaris RSA Signature Forgery Vulnerability
http://secunia.com/advisories/22226/
GLSA 200609-18
Opera: RSA signature forgery
http://www.gentoo.org/security/en/glsa/glsa-200609-18.xml
Sun Alert ID: 102657
Security Vulnerability With RSA Signature Affects the Sun Secure Global Desktop Software
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1
GLSA 200610-06
Mozilla Network Security Service (NSS): RSA signature forgery
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml
Sun Alert ID: 102656
Security Vulnerability Issue of Forged RSA Signatures for Java Enterprise System and Solaris
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1
Sun Alert ID: 102696
A Security Vulnerability in RSA Signature Verification Affects Sun Java System Application Server, Proxy Server and Web Server
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1
cisco-sr-20061108-openssl
Cisco Security Response: Multiple Vulnerabilities in OpenSSL Library
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
Sun Alert ID: 102686
Security Vulnerability in RSA Signature Verification Affects Java 2 Platform, Standard Edition
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1
MDKSA-2006:207
Updated bind packages fixes RSA signature verification vulnerability
http://www.mandriva.com/security/advisories?name=MDKSA-2006:207
Sun Alert ID: 102722
Security Vulnerability With RSA Signature Affects Solaris Applications Utilizing the libike Library
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1
Apple Security Update 2006-007
About the security content of Security Update 2006-007
http://docs.info.apple.com/article.html?artnum=304829
SA23155
Mac OS X Security Update Fixes Multiple Vulnerabilities
http://secunia.com/advisories/23155
NetBSD-SA2006-023
OpenSSL RSA Signature Forgery
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-023.txt.asc
Sun Alert ID: 102759
Security Vulnerability With RSA Signatures Affects Solaris WAN Boot
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1
Full-Disclosure Mailing List, Mon Jan 08 2007 - 20:17:36 CST
VMware ESX server security updates
http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0170.html
SUSE-SA:2007:010
IBMJava2
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html
SUSE-SA:2006:054
MozillaFirefox,MozillaThunderbird,seamonkey
http://www.novell.com/linux/security/advisories/2006_54_mozilla.html
SUSE-SA:2006:055
openssl,mozilla-nss
http://www.novell.com/linux/security/advisories/2006_55_ssl.html
SUSE-SA:2006:061
opera
http://www.novell.com/linux/security/advisories/2006_61_opera.html
RHSA-2007:0073
java-1.5.0-ibm security update
https://rhn.redhat.com/errata/RHSA-2007-0073.html
RHSA-2007:0072
IBMJava2 security update
https://rhn.redhat.com/errata/RHSA-2007-0072.html
RHSA-2007:0062
java-1.4.2-ibm security update
https://rhn.redhat.com/errata/RHSA-2007-0062.html
BEA07-169.00
WebLogic SSL may verify RSA Signatures incorrectly if the RSA key exponent is 3
https://support.bea.com/application_content/product_portlets/securityadvisories/238.html
Novell Security Alert 3590033
Security Vulnerability: Multiple RSA implementations fail to properly handle signatures
https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html
HPSBUX02219 SSRT061273
HP-UX Running BIND, Remote Denial of Service (DoS)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495
Sun Alert ID: 102648
Security Vulnerability in RSA Signature Verification Impacting Multiple SUN Products
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
HPSBMA02250 SSRT061275 rev.1
HP System Management Homepage (SMH) for Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01118771&jumpid=reg_R1002_USEN
HS07-034
Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients
http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
Sun Alert ID: 102744
Security Vulnerability With RSA Signatures Affects OpenSSL Shipped With Solaris
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1
Apple Web site
About the security content of Java Release 6 for Mac OS X 10.4
http://docs.info.apple.com/article.html?artnum=307177
Vmware Workstation Web site
VMware Workstation 6.0 Release Notes, New in Version 6.0.3
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html#603
VMware Server Web site
Key Features in VMware Server, What's New in Version 1.0.5
http://www.vmware.com/support/server/doc/releasenotes_server.html#resolved
IBM Systems Support Web site
Support for HMC
https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v61.Readme.html#MH01110
OpenOffice Web Site
Security Vulnerability in OpenOffice.org resulting from 3rd party libraries
http://www.openoffice.org/security/cves/CVE-2006-4339.html
ISS X-Force
OpenSSL RSA exponent 3 security bypass
http://www.iss.net/security_center/static/28755.php
CVE CVE-2007-5810
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5810
CVE CVE-2006-4339
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339
CVE CVE-2006-5201
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5201
CVE CVE-2006-5484
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5484
