NVD

Id
64730  
Name
CVE-2006-6169  
Description
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-29  
Modified Date
2011-03-07  
Seq
2006-6169  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338006 64730 CVE-2006-6169 20061201-01-P  View
338007 64730 CVE-2006-6169 [gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow  View
338008 64730 CVE-2006-6169 SUSE-SA:2006:075  View
338009 64730 CVE-2006-6169 oval:org.mitre.oval:def:11228  View
338010 64730 CVE-2006-6169 GLSA-200612-03  View
338011 64730 CVE-2006-6169 1927  View
338012 64730 CVE-2006-6169 1017291  View
338013 64730 CVE-2006-6169 http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm  View
338014 64730 CVE-2006-6169 DSA-1231  View
338015 64730 CVE-2006-6169 MDKSA-2006:221  View
338016 64730 CVE-2006-6169 OpenPKG-SA-2006.037  View
338017 64730 CVE-2006-6169 RHSA-2006:0754  View
338018 64730 CVE-2006-6169 20061127 GnuPG 1.4 and 2.0 buffer overflow  View
338019 64730 CVE-2006-6169 20061201 rPSA-2006-0224-1 gnupg  View
338020 64730 CVE-2006-6169 21306  View
338021 64730 CVE-2006-6169 2006-0068  View
338022 64730 CVE-2006-6169 USN-389-1  View
338023 64730 CVE-2006-6169 USN-393-2  View
338024 64730 CVE-2006-6169 ADV-2006-4736  View
338025 64730 CVE-2006-6169 gnupg-openfile-bo(30550)  View
338026 64730 CVE-2006-6169 https://bugs.g10code.com/gnupg/issue728  View
338027 64730 CVE-2006-6169 https://issues.rpath.com/browse/RPL-826  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58603 JVNDB-2006-000799 GnuPG の ask_outfile_name() 関数におけるヒープオーバーフローの脆弱性 GnuPG の openfile.c 内の ask_outfile_name() 関数には、make_printable_string() 関数において変換前の文字列長である NAMELEN よりも長い文字列が返された場合にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-6169 22271 CVE-2006-6169 64730 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000799.html 2006-11-28 2007-04-01 View