Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-1263
HistoryMar 06, 2007 - 8:19 p.m.

CVE-2007-1263

2007-03-0620:19:00
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.294 Low

EPSS

Percentile

96.9%

JSON

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

Affected configurations

NVD
Node
gnugpgmeRange≤1.1.3
OR
gnupggnupgRange≤1.4.6

References

Related

redhat 2
openvas 14
nessus 15
prion 1
debiancve 1
suse 1
oraclelinux 2
centos 2
cvelist 1
slackware 1
cve 1
debian 1
ubuntucve 6
ubuntu 2
coresecurity 1
securityvulns 2
redhat
redhat
(RHSA-2007:0107) Important: gnupg security update
2007-03-13 00:00:00
(RHSA-2007:0106) Important: gnupg security update
2007-03-06 00:00:00
openvas
openvas
SuSE Update for gpg SUSE-SA:2007:024
2009-01-28 00:00:00
Mandriva Update for gnupg MDKSA-2007:059 (gnupg)
2009-04-09 00:00:00
Debian Security Advisory DSA 1266-1 (gnupg)
2008-01-17 00:00:00
nessus
nessus
Oracle Linux 5 : gnupg (ELSA-2007-0107)
2013-07-12 00:00:00
Fedora Core 5 : gnupg-1.4.7-1 (2007-316)
2007-03-16 00:00:00
Oracle Linux 3 / 4 : gnupg (ELSA-2007-0106)
2013-07-12 00:00:00
prion
prion
Design/Logic Flaw
2007-03-06 20:19:00
debiancve
debiancve
CVE-2007-1263
2007-03-06 20:19:00
suse
suse
signature bypassing in gpg
2007-03-30 16:10:46
oraclelinux
oraclelinux
Important: gnupg security update
2007-06-26 00:00:00
Important: gnupg security update
2007-03-06 00:00:00
centos
centos
gnupg security update
2007-03-07 01:28:25
gnupg security update
2007-03-06 11:23:21
cvelist
cvelist
CVE-2007-1263
2007-03-06 20:00:00
slackware
slackware
[slackware-security] gnupg
2007-03-08 02:35:56
cve
cve
CVE-2007-1263
2007-03-06 20:19:00
debian
debian
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
2007-03-13 22:55:27
ubuntucve
ubuntucve
CVE-2007-1263
2007-03-06 00:00:00
CVE-2007-1266
2007-03-06 00:00:00
CVE-2007-1268
2007-03-06 00:00:00
ubuntu
ubuntu
GnuPG2, GPGME vulnerability
2007-03-13 00:00:00
GnuPG vulnerability
2007-03-08 00:00:00
coresecurity
coresecurity
GnuPG and GnuPG clients unsigned data injection vulnerability
2007-03-05 00:00:00
securityvulns
securityvulns
CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability
2007-03-06 00:00:00
Unsigned content spoofing in multiple application launching GnuPG
2007-03-06 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.294 Low

EPSS

Percentile

96.9%

JSON
Related for NVD:CVE-2007-1263
redhat2openvas14nessus15prion1debiancve1suse1oraclelinux2centos2cvelist1slackware1cve1debian1ubuntucve6ubuntu2coresecurity1securityvulns2