CVE

Id
7083  
CVE No.
CVE-2003-0255  
Status
Candidate  
Description
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.  
Phase
Assigned (20030506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
41558 7083 CVE-2003-0255 BUGTRAQ:20030504 Key validity bug in GnuPG 1.2.1 and earlier  View
41559 7083 CVE-2003-0255 URL:http://marc.info/?l=bugtraq&m=105215110111174&w=2  View
41560 7083 CVE-2003-0255 MISC:http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html  View
41561 7083 CVE-2003-0255 CONECTIVA:CLA-2003:694  View
41562 7083 CVE-2003-0255 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694  View
41563 7083 CVE-2003-0255 ENGARDE:ESA-20030515-016  View
41564 7083 CVE-2003-0255 URL:http://marc.info/?l=bugtraq&m=105301357425157&w=2  View
41565 7083 CVE-2003-0255 ENGARDE:20030515-016  View
41566 7083 CVE-2003-0255 URL:http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html  View
41567 7083 CVE-2003-0255 REDHAT:RHSA-2003:175  View
41568 7083 CVE-2003-0255 URL:http://www.redhat.com/support/errata/RHSA-2003-175.html  View
41569 7083 CVE-2003-0255 REDHAT:RHSA-2003:176  View
41570 7083 CVE-2003-0255 URL:http://www.redhat.com/support/errata/RHSA-2003-176.html  View
41571 7083 CVE-2003-0255 MANDRAKE:MDKSA-2003:061  View
41572 7083 CVE-2003-0255 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:061  View
41573 7083 CVE-2003-0255 TURBO:TLSA200334  View
41574 7083 CVE-2003-0255 URL:http://www.turbolinux.com/security/TLSA-2003-34.txt  View
41575 7083 CVE-2003-0255 SCO:CSSA-2003-034.0  View
41576 7083 CVE-2003-0255 BUGTRAQ:20030516 [OpenPKG-SA-2003.029] OpenPKG Security Advisory (gnupg)  View
41577 7083 CVE-2003-0255 URL:http://marc.info/?l=bugtraq&m=105311804129104&w=2  View
41578 7083 CVE-2003-0255 BUGTRAQ:20030522 [slackware-security] GnuPG key validation fix (SSA:2003-141-04)  View
41579 7083 CVE-2003-0255 URL:http://marc.info/?l=bugtraq&m=105362224514081&w=2  View
41580 7083 CVE-2003-0255 CERT-VN:VU#397604  View
41581 7083 CVE-2003-0255 URL:http://www.kb.cert.org/vuls/id/397604  View
41582 7083 CVE-2003-0255 BID:7497  View
41583 7083 CVE-2003-0255 URL:http://www.securityfocus.com/bid/7497  View
41584 7083 CVE-2003-0255 OSVDB:4947  View
41585 7083 CVE-2003-0255 URL:http://www.osvdb.org/4947  View
41586 7083 CVE-2003-0255 OVAL:oval:org.mitre.oval:def:135  View
41587 7083 CVE-2003-0255 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:135  View
41588 7083 CVE-2003-0255 XF:gnupg-invalid-key-acceptance(11930)  View

Related JVN