CVE-2006-4790
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
Exploit likelihood
What each source reports
NVD Score used
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
- Record
CVE-2006-4790- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
- Record
CVE-2006-4790- Updated
- 2026-11-02
EUVDEUVD-2006-4777 No score
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
- Record
EUVD-2006-4777- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjc3-r8f9-57p5 No score
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
- Record
GHSA-fjc3-r8f9-57p5- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10801-1 No score
gnutls-3.7.2-1.2 on GA media
These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10801-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnutls11Debian:3.1 |
before 1.0.16-13.2sarge2, plus listed versions 1.0.16-13.11.0.16-13.1sarge11.0.16-13.21.0.16-13.2sarge1 |
1.0.16-13.2sarge2 |
gnutlsRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-develRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutlsRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutlsRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-develRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gnutlsRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutls-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.3 | 0:1.0.20-3.2.3 |
gnutlsopenSUSE:Tumbleweed From an advisory covering 11 CVEs |
before 3.7.2-1.2 | 3.7.2-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4790 is a medium vulnerability (CVSS 5.0) in Gnu Gnutls, published September 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in gnutls11 1.0.16-13.2sarge2.
References
secunia.com/advisories/25762
securitytracker.com/id?1016844
vupen.com/english/advisories/2006/3899
Show 44 moreShow less
securityfocus.com/bid/20027
novell.com/linux/security/advisories/2006_23_sr.html
mandriva.com/security/advisories?name=MDKSA-2006:166
redhat.com/support/errata/RHSA-2006-0680.html
gnu.org/software/gnutls/security.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9937
sunsolve.sun.com/search/document.do?assetkey=1-26-102970-1
lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html
security.gentoo.org/glsa/glsa-200609-15.xml
debian.org/security/2006/dsa-1182
support.avaya.com/elmodocs2/security/ASA-2006-250.htm
exchange.xforce.ibmcloud.com/vulnerabilities/28953
ubuntu.com/usn/usn-348-1
nvd.nist.gov/vuln/detail/CVE-2006-4790
github.com/advisories/GHSA-fjc3-r8f9-57p5
access.redhat.com/errata/RHSA-2006:0680
bugzilla.redhat.com/show_bug.cgi?id=206411
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0680.json
cve.org/CVERecord?id=CVE-2006-4790
suse.com/security/cve/CVE-2006-4790