[baby]

Also errors in packets signatures from TLS handshakes (http://cryptologie.net/article/294/factoring-rsa-keys-with-t...)

And I'm sure there are many other vectors of attacks using this flaw.