Published: 08/11/2006 Updated: 11/10/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Mozilla Network Security Service (NSS) library prior to 3.11.3, as used in Mozilla Firefox prior to 1.5.0.8, Thunderbird prior to 1.5.0.8, and SeaMonkey prior to 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote malicious users to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 1.5.0.2
mozilla firefox 1.5.0.3
mozilla seamonkey 1.0
mozilla seamonkey 1.0.1
mozilla thunderbird 1.5
mozilla firefox 1.5
mozilla firefox 1.5.0.1
mozilla network security services 3.11.3
mozilla thunderbird 1.5.0.6
mozilla thunderbird 1.5.0.7
mozilla firefox 1.5.0.4
mozilla firefox 1.5.0.5
mozilla seamonkey 1.0.2
mozilla seamonkey 1.0.3
mozilla thunderbird 1.5.0.1
mozilla thunderbird 1.5.0.2
mozilla firefox 1.5.0.6
mozilla firefox 1.5.0.7
mozilla seamonkey 1.0.4
mozilla seamonkey 1.0.5
mozilla thunderbird 1.5.0.3
mozilla thunderbird 1.5.0.4

USN-352-1 fixed a flaw in the verification of PKCS certificate signatures Ulrich Kuehn discovered a variant of the original attack which the original fix did not cover (CVE-2006-5462) ...

USN-351-1 fixed a flaw in the verification of PKCS certificate signatures Ulrich Kuehn discovered a variant of the original attack which the original fix did not cover (CVE-2006-5462) ...

Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-4310 Tomas Kempinsky discovered that malformed FTP server responses could lead to denial of service CVE-2006-5462 Ulrich ...

Several security related problems have been discovered in Mozilla and derived products The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-4310 Tomas Kempinsky discovered that malformed FTP server responses could lead to denial of service CVE-2006-5462 Ulrich Kühn discovered that the c ...

This update covers packages for the little endian MIPS architecture missing in the original advisory For reference please find below the original advisory text: Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox The Common Vulnerabilities and Exposures project identifies the following v ...

Mozilla Foundation Security Advisory 2006-66 RSA Signature Forgery (variant) Announced November 7, 2006 Reporter Ulrich Kuehn Impact Critical Products Firefox, SeaMonkey, Thunderbird Fixed in ...

CVE-2006-5462

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect