{"schemaVersion":3,"id":"CVE-2006-5462","aliases":["DEBIAN-CVE-2006-5462"],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.","dates":{"published":"2006-11-08T21:00:00.000Z","modified":"2024-08-07T19:48:30.553Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.4,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.4,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02927,"percentile":0.8687,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.2250000000000002,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02702},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02927,"percentile":0.8687}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02702,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02754,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02927,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02927,"percentile":0.8687}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"firefox-esr","name":"firefox-esr","label":"firefox-esr","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/firefox-esr","purlType":"deb","versions":[{"text":"< 45.0esr-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.0esr-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta1","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.6","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"network_security_services","name":"network security services","label":"network_security_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.11.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.11.3","eol":null,"hubHref":"/vendor/mozilla/network_security_services"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0:beta","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0:beta | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5:beta2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.6","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.6 | 1.5.0.7","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/23883","label":"secunia.com/advisories/23883","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23235","label":"secunia.com/advisories/23235","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://security.gentoo.org/glsa/glsa-200612-08.xml","label":"security.gentoo.org/glsa/glsa-200612-08.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/23013","label":"secunia.com/advisories/23013","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-246.htm","label":"support.avaya.com/elmodocs2/security/ASA-2006-246.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/22770","label":"secunia.com/advisories/22770","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4387","label":"www.vupen.com/english/advisories/2006/4387","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.debian.org/security/2006/dsa-1225","label":"www.debian.org/security/2006/dsa-1225","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://securitytracker.com/id?1017180","label":"securitytracker.com/id?1017180","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/23009","label":"secunia.com/advisories/23009","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=356215","label":"bugzilla.mozilla.org/show_bug.cgi?id=356215","hostname":"bugzilla.mozilla.org","tags":["X Refsource MISC","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-312A.html","label":"www.us-cert.gov/cas/techalerts/TA06-312A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","Patch","US Government Resource"]},{"url":"http://www.debian.org/security/2006/dsa-1227","label":"www.debian.org/security/2006/dsa-1227","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/22980","label":"secunia.com/advisories/22980","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2007/0293","label":"www.vupen.com/english/advisories/2007/0293","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0733.html","label":"rhn.redhat.com/errata/RHSA-2006-0733.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/24711","label":"secunia.com/advisories/24711","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23263","label":"secunia.com/advisories/23263","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22763","label":"secunia.com/advisories/22763","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22965","label":"secunia.com/advisories/22965","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-382-1","label":"www.ubuntu.com/usn/usn-382-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0735.html","label":"rhn.redhat.com/errata/RHSA-2006-0735.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://securitytracker.com/id?1017181","label":"securitytracker.com/id?1017181","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.novell.com/linux/security/advisories/2006_68_mozilla.html","label":"www.novell.com/linux/security/advisories/2006_68_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://security.gentoo.org/glsa/glsa-200612-07.xml","label":"security.gentoo.org/glsa/glsa-200612-07.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.vupen.com/english/advisories/2007/1198","label":"www.vupen.com/english/advisories/2007/1198","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/23297","label":"secunia.com/advisories/23297","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22727","label":"secunia.com/advisories/22727","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22815","label":"secunia.com/advisories/22815","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0734.html","label":"rhn.redhat.com/errata/RHSA-2006-0734.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.kb.cert.org/vuls/id/335392","label":"www.kb.cert.org/vuls/id/335392","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","Patch","US Government Resource"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742","label":"www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742","hostname":"www1.itrc.hp.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30098","label":"exchange.xforce.ibmcloud.com/vulnerabilities/30098","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/22737","label":"secunia.com/advisories/22737","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22929","label":"secunia.com/advisories/22929","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/23202","label":"secunia.com/advisories/23202","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://security.gentoo.org/glsa/glsa-200612-06.xml","label":"security.gentoo.org/glsa/glsa-200612-06.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:206","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:206","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10478","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10478","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/23197","label":"secunia.com/advisories/23197","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2006/dsa-1224","label":"www.debian.org/security/2006/dsa-1224","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-66.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-66.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Patch"]},{"url":"http://secunia.com/advisories/22817","label":"secunia.com/advisories/22817","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22722","label":"secunia.com/advisories/22722","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-60.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-60.html","hostname":"www.mozilla.org","tags":["X Refsource MISC","Patch"]},{"url":"http://securitytracker.com/id?1017182","label":"securitytracker.com/id?1017182","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:205","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:205","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/23287","label":"secunia.com/advisories/23287","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-381-1","label":"www.ubuntu.com/usn/usn-381-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-5462","label":"security-tracker.debian.org/tracker/CVE-2006-5462","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1224-1","DSA-1225-1","DSA-1227-1","RHSA-2006:0733","RHSA-2006:0734","RHSA-2006:0735"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-11-08T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T19:48:30.553Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:13:05.807Z","stale":false,"partial":false}}