NVD

Id
59193  
Name
CVE-2006-0455  
Description
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-15  
Modified Date
2016-10-17  
Seq
2006-0455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304257 59193 CVE-2006-0455 20060401-01-U  View
304258 59193 CVE-2006-0455 FEDORA-2006-116  View
304259 59193 CVE-2006-0455 [gnupg-announce] 20060215 False positive signature verification in GnuPG  View
304260 59193 CVE-2006-0455 [gnupg-devel] 20060215 [Announce] False positive signature verification in GnuPG  View
304261 59193 CVE-2006-0455 oval:org.mitre.oval:def:10084  View
304262 59193 CVE-2006-0455 GLSA-200602-10  View
304263 59193 CVE-2006-0455 MDKSA-2006:043  View
304264 59193 CVE-2006-0455 SUSE-SR:2006:005  View
304265 59193 CVE-2006-0455 SUSE-SA:2006:009  View
304266 59193 CVE-2006-0455 SUSE-SA:2006:013  View
304267 59193 CVE-2006-0455 OpenPKG-SA-2006.001  View
304268 59193 CVE-2006-0455 RHSA-2006:0266  View
304269 59193 CVE-2006-0455 20060215 False positive signature verification in GnuPG  View
304270 59193 CVE-2006-0455 FLSA-2006:185355  View
304271 59193 CVE-2006-0455 16663  View
304272 59193 CVE-2006-0455 SSA:2006-072-02  View
304273 59193 CVE-2006-0455 2006-0008  View
304274 59193 CVE-2006-0455 USN-252-1  View
304275 59193 CVE-2006-0455 DSA-978  View
304276 59193 CVE-2006-0455 ADV-2006-0610  View
304277 59193 CVE-2006-0455 gnupg-gpgv-improper-verification(24744)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57917 JVNDB-2006-000113 GnuPG の gpgv における認証を回避される脆弱性 GnuPG に実装されている gpgv および gpg --verify の処理には、署名データが別ファイルとして分離される署名を処理した場合、不適切な署名でも正常終了コード (0) が返されてしまう脆弱性が存在します。 CVE-2006-0455 16557 CVE-2006-0455 59193 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000113.html 2006-02-15 2007-04-01 View