CVE-2006-4339

CVE-2006-4339 describes a vulnerability in OpenSSL versions prior to 0.9.7k and 0.9.8c, where an RSA key with exponent 3 incorrectly handles PKCS-1 padding during signature verification. This flaw allows remote attackers to forge PKCS #1 v1.5 signatures, leading to the potential for OpenSSL to incorrectly validate X.509 and other certificates. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and a potential impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.