NVD

Id
73390  
Name
CVE-2003-0255  
Description
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2003-05-27  
Modified Date
2017-07-10  
Seq
2003-0255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378063 73390 CVE-2003-0255 CLA-2003:694  View
378064 73390 CVE-2003-0255 20030504 Key validity bug in GnuPG 1.2.1 and earlier  View
378065 73390 CVE-2003-0255 ESA-20030515-016  View
378066 73390 CVE-2003-0255 20030516 [OpenPKG-SA-2003.029] OpenPKG Security Advisory (gnupg)  View
378067 73390 CVE-2003-0255 20030522 [slackware-security] GnuPG key validation fix (SSA:2003-141-04)  View
378068 73390 CVE-2003-0255 oval:org.mitre.oval:def:135  View
378069 73390 CVE-2003-0255 VU#397604  View
378070 73390 CVE-2003-0255 20030515-016  View
378071 73390 CVE-2003-0255 http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html  View
378072 73390 CVE-2003-0255 MDKSA-2003:061  View
378073 73390 CVE-2003-0255 RHSA-2003:175  View
378074 73390 CVE-2003-0255 RHSA-2003:176  View
378075 73390 CVE-2003-0255 7497  View
378076 73390 CVE-2003-0255 TLSA200334  View
378077 73390 CVE-2003-0255 gnupg-invalid-key-acceptance(11930)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63425 JVNDB-2003-000151 GnuPG におけるユーザ ID の妥当性確認が適切に行われない脆弱性 GnuPG には、ユーザ ID の妥当性確認が適切に行われない脆弱性が存在します。 CVE-2003-0255 7082 CVE-2003-0255 73390 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000151.html 2003-05-20 2007-04-01 View