CVE-2007-1263 | BDVDB-2026-22729 Detail
Description#
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://issues.rpath.com/browse/RPL-1111
- http://www.trustix.org/errata/2007/0009/
- http://support.avaya.com/elmodocs2/security/ASA-2007-144.htm
- http://fedoranews.org/cms/node/2776
- http://secunia.com/advisories/24407
- http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html
- http://secunia.com/advisories/24438
- http://fedoranews.org/cms/node/2775
- http://secunia.com/advisories/24650
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496
- http://securityreason.com/securityalert/2353
- http://www.redhat.com/support/errata/RHSA-2007-0107.html
- http://www.debian.org/security/2007/dsa-1266
- http://www.securityfocus.com/archive/1/461958/30/7710/threaded
- http://secunia.com/advisories/24511
Show all 32
- http://www.ubuntu.com/usn/usn-432-1
- http://www.coresecurity.com/?action=item&id=1687
- http://www.securityfocus.com/archive/1/461958/100/0/threaded
- http://secunia.com/advisories/24734
- http://secunia.com/advisories/24419
- http://secunia.com/advisories/24544
- http://www.ubuntu.com/usn/usn-432-2
- http://secunia.com/advisories/24420
- http://secunia.com/advisories/24875
- http://secunia.com/advisories/24365
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:059
- http://www.redhat.com/support/errata/RHSA-2007-0106.html
- http://www.securityfocus.com/bid/22757
- http://www.securitytracker.com/id?1017727
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html
- http://www.vupen.com/english/advisories/2007/0835
- http://secunia.com/advisories/24489
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.