Lucene search

[email protected]CVE-2003-0978

HistoryJan 05, 2004 - 5:00 a.m.

CVE-2003-0978

2004-01-0505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-0978

nvd

gpg

vulnerability

format string

denial of service

code execution

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.4%

JSON

Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.

CPENameOperatorVersion
gnu:privacy_guardgnu privacy guardeq1.2.1
gnu:privacy_guardgnu privacy guardeq1.3.3
gnu:privacy_guardgnu privacy guardeq1.2.2
gnu:privacy_guardgnu privacy guardeq1.2.3
gnu:privacy_guardgnu privacy guardeq1.2

CPE	Name	Operator	Version
gnu:privacy_guard	gnu privacy guard	eq	1.2.1
gnu:privacy_guard	gnu privacy guard	eq	1.3.3
gnu:privacy_guard	gnu privacy guard	eq	1.2.2
gnu:privacy_guard	gnu privacy guard	eq	1.2.3
gnu:privacy_guard	gnu privacy guard	eq	1.2

References

marc.info/?l=bugtraq&m=107047470625214&w=2

www.novell.com/linux/security/advisories/2003_048_gpg.html

www.s-quadra.com/advisories/Adv-20031203.txt

exchange.xforce.ibmcloud.com/vulnerabilities/13892

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.4%

JSON

Related for CVE-2003-0978

suse1