CVE-2006-5484

no score yetEPSS 1.4%

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2006-10-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ssh:tectia_client
ssh:tectia_connector
ssh:tectia_manager
ssh:tectia_server

References

http://secunia.com/advisories/22350
http://securitytracker.com/id?1017060
http://securitytracker.com/id?1017061
http://www.kb.cert.org/vuls/id/845620
http://www.ssh.com/company/news/2006/english/security/article/786/

Check your stack JSON