CVE-2006-0049
- State
- Published
- Severity
- Not scored
- Published
- Mar 13, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 28, 2005
Description
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-264-1vendor-advisory
- 19249third-party-advisory
- ADV-2006-0915vdb-entry
- RHSA-2006:0266vendor-advisory
- [gnupg-announce] 20060309 [Announce] GnuPG does not detect injection of unsigned datamailing-list
- 450third-party-advisory
- 19232third-party-advisory
- 23790vdb-entry
- SSA:2006-072-02vendor-advisory
- 19173third-party-advisory
- FLSA-2006:185355vendor-advisory
- 17058vdb-entry
- 568third-party-advisory
- oval:org.mitre.oval:def:10063vdb-entrysignature
- 19287third-party-advisory
- 2006-0014vendor-advisory
- 1015749vdb-entry
- 19532third-party-advisory
- SUSE-SA:2006:014vendor-advisory
- GLSA-200603-08vendor-advisory
- gnupg-nondetached-sig-verification(25184)vdb-entry
- 19234third-party-advisory
- FEDORA-2006-147vendor-advisory
- 19197third-party-advisory
- 19244third-party-advisory
- 19203third-party-advisory
- MDKSA-2006:055vendor-advisory
- 20060309 GnuPG does not detect injection of unsigned datamailing-list
- 19231third-party-advisory
- DSA-993vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.