CVE-2006-4340
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1...
CVE-2006-4340 is a medium vulnerability (CVSS 4.0) in Mozilla Firefox, published September 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. Fixed in thunderbird 1.5.0.7-1.
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
CVE-2006-4340- CVSS 2.0
- 4.0 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
CVE-2006-4340- Updated
- 2026-11-02
EUVDEUVD-2006-4328 No score
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
EUVD-2006-4328- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q7vf-rjwh-chxv No score
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1...
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
GHSA-q7vf-rjwh-chxv- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
CVE-2006-4340- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4340 No score
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
- Record
DEBIAN-CVE-2006-4340- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:13 |
before 1.5.0.7-1 | 1.5.0.7-1 |
thunderbirdDebian:14 |
before 1.5.0.7-1 | 1.5.0.7-1 |
mozilla-thunderbirdDebian:3.1 |
before 1.0.2-2.sarge1.0.8c.1, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.81.0.2-2.sarge1.0.8a1.0.2-2.sarge1.0.8b.11.0.2-2.sarge1.0.8b.2 |
1.0.2-2.sarge1.0.8c.1 |
mozillaDebian:3.1 |
before 2:1.7.8-1sarge7.3.1, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge5 Show 5 moreShow less2:1.7.8-1sarge62:1.7.8-1sarge72:1.7.8-1sarge7.12:1.7.8-1sarge7.2.12:1.7.8-1sarge7.2.2 |
2:1.7.8-1sarge7.3.1 |
mozilla-firefoxDebian:3.1 |
before 1.0.4-2sarge12, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge2 Show 6 moreShow less1.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 |
1.0.4-2sarge12 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
Show 96 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.5-0.1.el3 | 0:1.0.5-0.1.el3 |
devhelpRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::as |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::es |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
devhelpRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws |
before 0:0.10-0.4.el4 | 0:0.10-0.4.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.5-0.1.el4 | 0:1.0.5-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.5.0.7-0.1.el4 | 0:1.5.0.7-0.1.el4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere
securitytracker.com/id?1016858
secunia.com/advisories/22992
vupen.com/english/advisories/2006/3748
redhat.com/support/errata/RHSA-2006-0676.html
Show 115 moreShow less
ubuntu.com/usn/usn-361-1
imc.org/ietf-openpgp/mail-archive/msg14307.html
us-cert.gov/cas/techalerts/TA06-312A.html
mandriva.com/security/advisories?name=MDKSA-2006:168
us.debian.org/security/2006/dsa-1191
debian.org/security/2006/dsa-1210
mozilla.org/security/announce/2006/mfsa2006-60.html
support.avaya.com/elmodocs2/security/ASA-2006-224.htm
gentoo.org/security/en/glsa/glsa-200610-06.xml
security.gentoo.org/glsa/glsa-200609-19.xml
www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
exchange.xforce.ibmcloud.com/vulnerabilities/30098
sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
securityfocus.com/archive/1/446140/100/0/threaded
novell.com/linux/security/advisories/2006_54_mozilla.html
issues.rpath.com/browse/RPL-640
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007
nvd.nist.gov/vuln/detail/CVE-2006-4340
github.com/advisories/GHSA-q7vf-rjwh-chxv
security-tracker.debian.org/tracker/CVE-2006-4340
access.redhat.com/errata/RHSA-2006:0675
bugzilla.redhat.com/show_bug.cgi?id=206428
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0675.json
cve.org/CVERecord?id=CVE-2006-4253