CVE-2006-5484

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.

• http://secunia.com/advisories/22350Patch, Third Party Advisory
• http://securitytracker.com/id?1017060Patch, Third Party Advisory, VDB Entry
• http://securitytracker.com/id?1017061Patch, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/845620Third Party Advisory, US Government Resource
• http://www.ssh.com/company/news/2006/english/security/article/786/Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4032Permissions Required
• http://secunia.com/advisories/22350Patch, Third Party Advisory
• http://securitytracker.com/id?1017060Patch, Third Party Advisory, VDB Entry
• http://securitytracker.com/id?1017061Patch, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/845620Third Party Advisory, US Government Resource
• http://www.ssh.com/company/news/2006/english/security/article/786/Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4032Permissions Required

Published

Oct 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5478Multiple stack-based buffer overflows in Novell eDirectory 8…
• CVE-2006-5479The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allo…
• CVE-2006-5480PHP remote file inclusion vulnerability in lib/rs.php in 2le…
• CVE-2006-5481Multiple PHP remote file inclusion vulnerabilities in 2le.ne…
• CVE-2006-5482ufs_vnops.c in FreeBSD 6.1 allows local users to cause an un…
• CVE-2006-5483p1003_1b.c in FreeBSD 6.1 allows local users to cause an uns…
• CVE-2006-5485Multiple PHP remote file inclusion vulnerabilities in SpeedB…
• CVE-2006-5486Cross-site scripting (XSS) vulnerability in Webmail in Sun J…
• CVE-2006-5487Directory traversal vulnerability in Marshal MailMarshal SMT…
• CVE-2006-5488SQL injection vulnerability in XchangeBoard 1.70, and possib…
• CVE-2006-5489Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP…
• CVE-2006-5490Multiple SQL injection vulnerabilities in Segue Content Mana…