CVE-2006-4340

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.

Published: 2006-09-15 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-4340 is rated Moderate Risk (43.3/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 2.15%). Mandatory action: Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-4340

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 2.70% 2.15% -0.55%
2 2026-04-12 3.09% 2.70% -0.39%
3 2026-04-04 3.09%

Full EPSS history (24 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-4340

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.0 2.0 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
4.9 4.9 [email protected]

Weakness enumeration for CVE-2006-4340

OS Trackers for CVE-2006-4340

vendor priority summary link
debian high CVE-2006-4340 high priority: Debian including 2 source packages (firefox, thunderbird), 6 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 6. https://security-tracker.debian.org/tracker/CVE-2006-4340
gentoo normal CVE-2006-4340: 3 GLSA(s) (200609-19, 200610-01, 200610-06), 5 atom(s) (dev-libs/nss, mail-client/mozilla-thunderbird, mail-client/mozilla-thunderbird-bin, www-client/mozilla-firefox, www-client/mozilla-firefox-bin); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-4340
redhat high https://access.redhat.com/security/cve/CVE-2006-4340
ubuntu medium CVE-2006-4340 medium priority: Ubuntu including 6 source packages (firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner), 24 status rows across 4 suites (dapper, edgy, feisty, upstream): DNE 10, needs-triage 6, released 5, not-affected 2, ignored 1. https://ubuntu.com/security/CVE-2006-4340

Affected software / configurations for CVE-2006-4340

Vendor Product Version Raw CPE
mozilla firefox <= 1.5.0.6 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozilla network_security_services <= 3.11.2 cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
mozilla seamonkey <= 1.0.4 cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozilla thunderbird <= 1.5.0.6 cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

References for CVE-2006-4340

URL Tags
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
http://secunia.com/advisories/21903 Vendor Advisory
http://secunia.com/advisories/21906 Patch Vendor Advisory
http://secunia.com/advisories/21915 Vendor Advisory
http://secunia.com/advisories/21916 Vendor Advisory
http://secunia.com/advisories/21939 Vendor Advisory
http://secunia.com/advisories/21940 Vendor Advisory
http://secunia.com/advisories/21949 Patch Vendor Advisory
http://secunia.com/advisories/21950 Vendor Advisory
http://secunia.com/advisories/22001 Vendor Advisory
http://secunia.com/advisories/22025 Vendor Advisory
http://secunia.com/advisories/22036 Vendor Advisory
http://secunia.com/advisories/22044
http://secunia.com/advisories/22055 Vendor Advisory
http://secunia.com/advisories/22056
http://secunia.com/advisories/22066
http://secunia.com/advisories/22074 Vendor Advisory
http://secunia.com/advisories/22088 Vendor Advisory
http://secunia.com/advisories/22195
http://secunia.com/advisories/22210 Vendor Advisory
http://secunia.com/advisories/22226 Vendor Advisory
http://secunia.com/advisories/22247 Vendor Advisory
http://secunia.com/advisories/22274 Vendor Advisory
http://secunia.com/advisories/22299 Vendor Advisory
http://secunia.com/advisories/22342 Vendor Advisory
http://secunia.com/advisories/22422 Vendor Advisory
http://secunia.com/advisories/22446 Vendor Advisory
http://secunia.com/advisories/22849
http://secunia.com/advisories/22992
http://secunia.com/advisories/23883
http://secunia.com/advisories/24711
http://security.gentoo.org/glsa/glsa-200609-19.xml
http://security.gentoo.org/glsa/glsa-200610-01.xml
http://securitytracker.com/id?1016858
http://securitytracker.com/id?1016859
http://securitytracker.com/id?1016860
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1
http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm
http://www.debian.org/security/2006/dsa-1192
http://www.debian.org/security/2006/dsa-1210
http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168
http://www.mandriva.com/security/advisories?name=MDKSA-2006:169
http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/
http://www.mozilla.org/security/announce/2006/mfsa2006-60.html
http://www.mozilla.org/security/announce/2006/mfsa2006-66.html
http://www.novell.com/linux/security/advisories/2006_54_mozilla.html
http://www.novell.com/linux/security/advisories/2006_55_ssl.html
http://www.redhat.com/support/errata/RHSA-2006-0675.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0676.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0677.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/446140/100/0/threaded
http://www.ubuntu.com/usn/usn-350-1
http://www.ubuntu.com/usn/usn-351-1
http://www.ubuntu.com/usn/usn-352-1
http://www.ubuntu.com/usn/usn-354-1
http://www.ubuntu.com/usn/usn-361-1
http://www.us-cert.gov/cas/techalerts/TA06-312A.html US Government Resource
http://www.us.debian.org/security/2006/dsa-1191
http://www.vupen.com/english/advisories/2006/3617
http://www.vupen.com/english/advisories/2006/3622
http://www.vupen.com/english/advisories/2006/3748
http://www.vupen.com/english/advisories/2006/3899
http://www.vupen.com/english/advisories/2007/0293
http://www.vupen.com/english/advisories/2007/1198
http://www.vupen.com/english/advisories/2008/0083
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742
https://exchange.xforce.ibmcloud.com/vulnerabilities/30098
https://issues.rpath.com/browse/RPL-640
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007
cvelogic Threat Intelligence