Lucene search
Ubuntu.comUB:CVE-2007-1267HistoryMar 06, 2007 - 12:00 a.m.
CVE-2007-1267
2007-03-0600:00:00
ubuntu.com
ubuntu.com
5
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.294 Low
EPSS
Percentile
96.9%
Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument
when invoking GnuPG, which prevents Sylpheed from visually distinguishing
between signed and unsigned portions of OpenPGP messages with multiple
components, which allows remote attackers to forge the contents of a
message without detection.
Notes
| Author | Note |
|---|---|
| fujitsu | Not important, as GnuPG was fixed in CVE-2007-1263. |
Related
redhat
redhat
(RHSA-2007:0107) Important: gnupg security update
2007-03-13 00:00:00
(RHSA-2007:0106) Important: gnupg security update
2007-03-06 00:00:00
openvas
openvas
SuSE Update for gpg SUSE-SA:2007:024
2009-01-28 00:00:00
Slackware Advisory SSA:2007-066-01 gnupg
2012-09-11 00:00:00
Mandriva Update for gnupg MDKSA-2007:059 (gnupg)
2009-04-09 00:00:00
nessus
nessus
Oracle Linux 5 : gnupg (ELSA-2007-0107)
2013-07-12 00:00:00
Fedora Core 5 : gnupg-1.4.7-1 (2007-316)
2007-03-16 00:00:00
Oracle Linux 3 / 4 : gnupg (ELSA-2007-0106)
2013-07-12 00:00:00
prion
prion
Design/Logic Flaw
2007-03-06 20:19:00
Design/Logic Flaw
2007-03-06 20:19:00
debiancve
debiancve
CVE-2007-1263
2007-03-06 20:19:00
CVE-2007-1267
2007-03-06 20:19:00
cve
cve
CVE-2007-1263
2007-03-06 20:19:00
CVE-2007-1267
2007-03-06 20:19:00
slackware
slackware
[slackware-security] gnupg
2007-03-08 02:35:56
debian
debian
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
2007-03-13 22:55:27
nvd
nvd
CVE-2007-1267
2007-03-06 20:19:00
CVE-2007-1263
2007-03-06 20:19:00
suse
suse
signature bypassing in gpg
2007-03-30 16:10:46
oraclelinux
oraclelinux
Important: gnupg security update
2007-06-26 00:00:00
Important: gnupg security update
2007-03-06 00:00:00
centos
centos
gnupg security update
2007-03-07 01:28:25
gnupg security update
2007-03-06 11:23:21
cvelist
cvelist
CVE-2007-1263
2007-03-06 20:00:00
CVE-2007-1267
2007-03-06 20:00:00
ubuntu
ubuntu
GnuPG vulnerability
2007-03-08 00:00:00
GnuPG2, GPGME vulnerability
2007-03-13 00:00:00
ubuntucve
ubuntucve
coresecurity
coresecurity
GnuPG and GnuPG clients unsigned data injection vulnerability
2007-03-05 00:00:00
securityvulns
securityvulns
Unsigned content spoofing in multiple application launching GnuPG
2007-03-06 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.294 Low
EPSS
Percentile
96.9%
Related for UB:CVE-2007-1267