PT-2000-1884 · Gnu · Gnupg

Publicado 2000-12-19 · Atualizado 2018-05-03 · CVE-2000-0974

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GnuPG (gpg) version 1.0.3

Description The issue concerns a problem with signature verification in files containing multiple documents. Specifically, it does not properly check all signatures, which allows an attacker to modify the contents of all documents except the first one without being detected.

Recommendations For GnuPG (gpg) version 1.0.3, update to a newer version that properly checks all signatures of a file containing multiple documents to prevent undetected modifications.

Exploit

Correção

Identificadores relacionados

CVE-2000-0974

Produtos afetados

Gnupg

Referências · 11

• 🔥 http://securityfocus.com/bid/1797 · Exploit
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:67.gnupg.asc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0974 · Nota de Segurança
• http://osvdb.org/1608 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0201.html · Nota
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-038.0.txt · Nota
• http://debian.org/security/2000/20001111 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000334 · Nota
• http://redhat.com/support/errata/RHSA-2000-089.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0361.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5386 · Nota