Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-393-1
HistoryDec 07, 2006 - 12:00 a.m.

GnuPG vulnerability

2006-12-0700:00:00
ubuntu.com
30

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.056 Low

EPSS

Percentile

93.3%

JSON

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06
  • Ubuntu 5.10

Details

Tavis Ormandy discovered that gnupg was incorrectly using the stack. If
a user were tricked into processing a specially crafted message, an
attacker could execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchgnupg< 1.4.3-2ubuntu3.2UNKNOWN
Ubuntu6.06noarchgnupg< 1.4.2.2-1ubuntu2.4UNKNOWN
Ubuntu5.10noarchgnupg< 1.4.1-1ubuntu1.6UNKNOWN

Related

openvas 16
cvelist 1
securityvulns 1
freebsd 1
nvd 1
nessus 17
cert 1
cve 1
ubuntucve 1
debiancve 1
gentoo 1
debian 1
osv 1
slackware 2
suse 1
ubuntu 1
centos 2
redhat 1
oraclelinux 1
fedora 1
openvas
openvas
FreeBSD Ports: gnupg
2008-09-04 00:00:00
Ubuntu: Security Advisory (USN-393-1)
2022-08-26 00:00:00
FreeBSD Ports: gnupg
2008-09-04 00:00:00
cvelist
cvelist
CVE-2006-6235
2006-12-07 11:00:00
securityvulns
securityvulns
GnuPG: remotely controllable function pointer [CVE-2006-6235]
2006-12-07 00:00:00
freebsd
freebsd
gnupg -- remotely controllable function pointer
2006-12-04 00:00:00
nvd
nvd
CVE-2006-6235
2006-12-07 11:28:00
nessus
nessus
Mandrake Linux Security Advisory : gnupg (MDKSA-2006:228)
2007-02-18 00:00:00
FreeBSD : gnupg -- remotely controllable function pointer (4db1669c-8589-11db-ac4f-02e081235dab)
2006-12-11 00:00:00
Ubuntu 5.10 / 6.06 LTS / 6.10 : gnupg vulnerability (USN-393-1)
2007-11-10 00:00:00
cert
cert
GnuPG vulnerable to remote data control
2006-12-18 00:00:00
cve
cve
CVE-2006-6235
2006-12-07 11:28:00
ubuntucve
ubuntucve
CVE-2006-6235
2006-12-07 00:00:00
debiancve
debiancve
CVE-2006-6235
2006-12-07 11:28:00
gentoo
gentoo
GnuPG: Multiple vulnerabilities
2006-12-10 00:00:00
debian
debian
[SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution
2006-12-09 09:39:51
osv
osv
gnupg
2006-12-09 00:00:00
slackware
slackware
[slackware-security] gnupg [resigned]
2006-12-07 22:03:33
[slackware-security] gnupg
2006-12-06 22:27:00
suse
suse
remote code execution in gpg,gpg2
2006-12-13 12:47:52
ubuntu
ubuntu
GnuPG2 vulnerabilities
2006-12-07 00:00:00
centos
centos
gnupg security update
2006-12-07 03:18:30
gnupg security update
2006-12-06 18:36:40
redhat
redhat
(RHSA-2006:0754) Important: gnupg security update
2006-12-06 00:00:00
oraclelinux
oraclelinux
Important gnupg security update
2006-12-11 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: gnupg-1.4.7-1
2007-03-12 19:15:32

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.056 Low

EPSS

Percentile

93.3%

JSON
Related for USN-393-1
openvas16cvelist1securityvulns1freebsd1nvd1nessus17cert1cve1ubuntucve1debiancve1gentoo1debian1osv1slackware2suse1ubuntu1centos2redhat1oraclelinux1fedora1