OpenSSL PKCS Padding RSA Signature Forgery Vulnerability

OpenSSL PKCS Padding RSA Signature Forgery Vulnerability

References:

Announcing Apache2 and OpenSSL Security fixes for HMC (IBM)
Apple Security Update 2006-007 (Apple Inc.)
ASA-2006-188 - openssl security update (RHSA-2006-0661) (Avaya)
ASA-2006-196 Avaya Security Advisory (Avaya)
ASA-2006-224 - firefox security update (RHSA-2006-0675) (Avaya)
ASA-2006-246 - firefox security update (RHSA-2006-0733) (Avaya)
BIND 9.4.0b3 is now available. (ISC)
BIND 9: OpenSSL Vulnerabilities. (ISC)
Bleichenbacher's RSA signature forgery based on implementation error (Hal Finney)
Blue Coat Systems Homepage (Blue Coat Systems)
Cisco Applied Intelligence Response: Detecting and Mitigating Exploitation of Mu (Cisco)
Cisco Security Response: Multiple Vulnerabilities in OpenSSL library (Cisco)
Critical Patch Update - January 2007 (Oracle)
Cryptography and Computeralgebra Computer Science (Technische Universitat Darmstadt)
IPCop 1.4.13 released (IPCop)
Mozilla Foundation Security Advisory 2006-60 (Mozilla Foundation)
Mozilla Foundation Security Advisory 2006-66 (Mozilla)
NetBSD Security Advisory 2006-023 (NetBSD)
Reflection Security Updates for US-CERT Vulnerability #845620: RSA Public Expone (Attachmate)
Release notice for Ingate FirewallÂ® 4.5.1 and Ingate SIParatorÂ® 4.5.1 (inGate)
RHSA-2006-0735 - thunderbird security update (RedHat)
RHSA-2006:0661-8 - openssl security update (Red Hat)
RHSA-2006:0675-5 - firefox security update (Red Hat)
RHSA-2006:0676-10 - seamonkey security update (Red Hat)
RHSA-2006:0677-5 - thunderbird security update (Red Hat)
RHSA-2006:0733-4 - firefox security update (RedHat)
RHSA-2006:0734-5 - seamonkey security update (RedHat)
RSA Signature Forgery (CVE-2006-4339) (OpenSSL Project)
RSA Signature Forgery Vulnerability in SSH Tectia (SSH Communications Security)
RSA signature verification vulnerability in OpenSSL (Arkoon)
Security Advisoryâ??VShell, SecureCRT and SecureFX (VanDyke Software)
Security Vulnerability with OpenSSL: RSA Signature Forgery (Blue Coat Systems)
Slackware Security 2006 (Slackware)
SnapGear Firmware Release Notes (Secure Computing)
Sun Alert ID: 102657 (Sun)
Sun Alert ID: 102696 - A Security Vulnerability in RSA Signature Verification Af (Sun)
Sun Alert ID: 102722 (Sun)
Sun Alert ID: 102744 (Sun)
Sun security advisory 102648 (Sun)
Sun Security Advisory 102656 (Sun Microsystems)
VMware Server Release Notes (VMware)
VU#845620 - Multiple RSA implementations fail to properly handle signatures (US-CERT)
SIP over TLS: X.509 peer authentication vulnerability in Ingate products (Per Cederqvist )
About the security content of Java Release 6 for Mac OS X 10.4 (Apple)
ASA-2007-091 - Security Vulnerabilities in Java (Avaya)
Avaya Security Advisory ASA-2006-250 (Avaya Inc.)
HPSBMA02250 SSRT061275 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)
HPSBUX02156 SSRT061236 rev.2 - HP-UX Running (HP)
Mware ESX server security updates (VMWare)
RHSA-2007:0062-2: java-1.4.2-ibm security update (Red Hat)
RHSA-2007:0072-2: IBMJava2 security update (Red Hat)
RHSA-2008:0264-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
RHSA-2008:0525-5 Red Hat Network Satellite Server Solaris client security update (Red Hat)
RHSA-2008:0629-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
Security Vulnerability: Multiple RSA implementations fail to properly handle sig (Novell)
Solution 200708 : A Security Vulnerability in RSA Signature Verification Affe (Sun)
Sun Alert 102759 - Security Vulnerability With RSA Signatures Affects Solaris WA (Sun)
Sun Alert ID: 102759 Security Vulnerabilities in OpenSSL Affect Solaris WAN Boot (Sun)
Sun Alert ID: 102781 - RSA Signature Forgery Issues in Mozilla 1.7 for Solaris 8 (Sun)
Sun Alert ID:102656 (Sun)
Urgent from Sybase: Preliminary advisory on security vulnerability in RSA signat (Sybase)
Vulnerability Note VU#594904 - Sun Network Security Services (NSS) vulnerable to (US-CERT)