CVE-2006-5484: SSH Tectia Client

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.

Affected products

• SSH Tectia Client: up to and including 5.1.0
• SSH Tectia Connector: up to and including 5.1.0
• SSH Tectia Manager: up to and including 2.2.0
• SSH Tectia Server: up to and including 5.1.0

Published 2006-10-24. Last modified 2026-06-16.