CVE-2006-4790

Severity Score

9.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.

verify.c en GnuTLS anterior a 1.4.4, cuando usamos una llave RSA con exponente 3, no maneja correctamente el exceso de datos en el campo digestAlgorithm.parameters al generar un hash, el cual permite a un atacante remoto falsificar una firma PKCS #1 v1.5 que es firmada por esa llave RSA y evita que GnuTLS verifique correctamente X.509 y otros certificados que utilicen PKCS, es una variante de CVE-2006-4339.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-09-13 CVE Reserved
2006-09-14 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (32)

URL	Tag	Source
http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html	Mailing List
http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001212.html	Mailing List
http://secunia.com/advisories/21937	Third Party Advisory
http://secunia.com/advisories/21942	Third Party Advisory
http://secunia.com/advisories/21973	Third Party Advisory
http://secunia.com/advisories/22049	Third Party Advisory
http://secunia.com/advisories/22080	Third Party Advisory
http://secunia.com/advisories/22084	Third Party Advisory
http://secunia.com/advisories/22097	Third Party Advisory
http://secunia.com/advisories/22226	Third Party Advisory
http://secunia.com/advisories/22992	Third Party Advisory
http://secunia.com/advisories/25762	Third Party Advisory
http://securitytracker.com/id?1016844	Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm	X_refsource_confirm
http://www.securityfocus.com/bid/20027	Vdb Entry
http://www.vupen.com/english/advisories/2006/3635	Vdb Entry
http://www.vupen.com/english/advisories/2006/3899	Vdb Entry
http://www.vupen.com/english/advisories/2007/2289	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/28953	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9937	Signature

URL	Date	SRC

URL	Date	SRC
http://www.gnu.org/software/gnutls/security.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2006-0680.html	2017-10-11

URL	Date	SRC
http://security.gentoo.org/glsa/glsa-200609-15.xml	2017-10-11
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1	2017-10-11
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102970-1	2017-10-11
http://www.debian.org/security/2006/dsa-1182	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2006:166	2017-10-11
http://www.novell.com/linux/security/advisories/2006_23_sr.html	2017-10-11
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html	2017-10-11
http://www.ubuntu.com/usn/usn-348-1	2017-10-11
https://access.redhat.com/security/cve/CVE-2006-4790	2006-09-14
https://bugzilla.redhat.com/show_bug.cgi?id=1618201	2006-09-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.17 Search vendor "Gnu" for product "Gnutls" and version "1.0.17"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.18 Search vendor "Gnu" for product "Gnutls" and version "1.0.18"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.19 Search vendor "Gnu" for product "Gnutls" and version "1.0.19"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.20 Search vendor "Gnu" for product "Gnutls" and version "1.0.20"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.21 Search vendor "Gnu" for product "Gnutls" and version "1.0.21"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.22 Search vendor "Gnu" for product "Gnutls" and version "1.0.22"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.23 Search vendor "Gnu" for product "Gnutls" and version "1.0.23"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.24 Search vendor "Gnu" for product "Gnutls" and version "1.0.24"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.0.25 Search vendor "Gnu" for product "Gnutls" and version "1.0.25"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.14 Search vendor "Gnu" for product "Gnutls" and version "1.1.14"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.15 Search vendor "Gnu" for product "Gnutls" and version "1.1.15"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.16 Search vendor "Gnu" for product "Gnutls" and version "1.1.16"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.17 Search vendor "Gnu" for product "Gnutls" and version "1.1.17"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.18 Search vendor "Gnu" for product "Gnutls" and version "1.1.18"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.19 Search vendor "Gnu" for product "Gnutls" and version "1.1.19"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.20 Search vendor "Gnu" for product "Gnutls" and version "1.1.20"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.21 Search vendor "Gnu" for product "Gnutls" and version "1.1.21"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.22 Search vendor "Gnu" for product "Gnutls" and version "1.1.22"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.1.23 Search vendor "Gnu" for product "Gnutls" and version "1.1.23"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.0 Search vendor "Gnu" for product "Gnutls" and version "1.2.0"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.1 Search vendor "Gnu" for product "Gnutls" and version "1.2.1"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.2 Search vendor "Gnu" for product "Gnutls" and version "1.2.2"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.3 Search vendor "Gnu" for product "Gnutls" and version "1.2.3"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.4 Search vendor "Gnu" for product "Gnutls" and version "1.2.4"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.5 Search vendor "Gnu" for product "Gnutls" and version "1.2.5"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.6 Search vendor "Gnu" for product "Gnutls" and version "1.2.6"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.7 Search vendor "Gnu" for product "Gnutls" and version "1.2.7"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.8 Search vendor "Gnu" for product "Gnutls" and version "1.2.8"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.8.1a1 Search vendor "Gnu" for product "Gnutls" and version "1.2.8.1a1"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.9 Search vendor "Gnu" for product "Gnutls" and version "1.2.9"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.10 Search vendor "Gnu" for product "Gnutls" and version "1.2.10"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.2.11 Search vendor "Gnu" for product "Gnutls" and version "1.2.11"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.0 Search vendor "Gnu" for product "Gnutls" and version "1.3.0"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.1 Search vendor "Gnu" for product "Gnutls" and version "1.3.1"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.2 Search vendor "Gnu" for product "Gnutls" and version "1.3.2"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.3 Search vendor "Gnu" for product "Gnutls" and version "1.3.3"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.4 Search vendor "Gnu" for product "Gnutls" and version "1.3.4"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.3.5 Search vendor "Gnu" for product "Gnutls" and version "1.3.5"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.4.0 Search vendor "Gnu" for product "Gnutls" and version "1.4.0"		-		Affected
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				1.4.1 Search vendor "Gnu" for product "Gnutls" and version "1.4.1"		-		Affected