CVE

Id
11572  
CVE No.
CVE-2005-0366  
Status
Candidate  
Description
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.  
Phase
Assigned (20050211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
82704 11572 CVE-2005-0366 MISC:http://eprint.iacr.org/2005/033  View
82705 11572 CVE-2005-0366 CONFIRM:http://www.pgp.com/library/ctocorner/openpgp.html  View
82706 11572 CVE-2005-0366 MISC:http://eprint.iacr.org/2005/033.pdf  View
82707 11572 CVE-2005-0366 GENTOO:GLSA-200503-29  View
82708 11572 CVE-2005-0366 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-29.xml  View
82709 11572 CVE-2005-0366 MANDRAKE:MDKSA-2005:057  View
82710 11572 CVE-2005-0366 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:057  View
82711 11572 CVE-2005-0366 SUSE:SUSE-SR:2005:007  View
82712 11572 CVE-2005-0366 URL:http://www.novell.com/linux/security/advisories/2005_07_sr.html  View
82713 11572 CVE-2005-0366 CERT-VN:VU#303094  View
82714 11572 CVE-2005-0366 URL:http://www.kb.cert.org/vuls/id/303094  View
82715 11572 CVE-2005-0366 BID:12529  View
82716 11572 CVE-2005-0366 URL:http://www.securityfocus.com/bid/12529  View
82717 11572 CVE-2005-0366 OSVDB:13775  View
82718 11572 CVE-2005-0366 URL:http://www.osvdb.org/13775  View
82719 11572 CVE-2005-0366 SECTRACK:1013166  View

Related JVN