Vulnerability record · CVE-2006-5484 · published 24 October 2006
CVE-2006-5484: Ssh tectia client vulnerability
Ssh · Tectia Client
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
Description
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected products
4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://secunia.com/advisories/22350 | PatchThird Party Advisory |
| http://securitytracker.com/id?1017060 | PatchThird Party AdvisoryVDB Entry |
| http://securitytracker.com/id?1017061 | PatchThird Party AdvisoryVDB Entry |
| http://www.kb.cert.org/vuls/id/845620 | Third Party AdvisoryUS Government Resource |
| http://www.ssh.com/company/news/2006/english/security/article/786/ | PatchVendor Advisory |
| http://www.vupen.com/english/advisories/2006/4032 | Permissions Required |
| http://secunia.com/advisories/22350 | PatchThird Party Advisory |
| http://securitytracker.com/id?1017060 | PatchThird Party AdvisoryVDB Entry |
| http://securitytracker.com/id?1017061 | PatchThird Party AdvisoryVDB Entry |
| http://www.kb.cert.org/vuls/id/845620 | Third Party AdvisoryUS Government Resource |
| http://www.ssh.com/company/news/2006/english/security/article/786/ | PatchVendor Advisory |
| http://www.vupen.com/english/advisories/2006/4032 | Permissions Required |
Track CVE-2006-5484 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2006-5484), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.