5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Hadmut Danish discovered a bug in enigmail, GPG support for Mozilla
MailNews and Mozilla Thunderbird, that can lead to the encryption of
mail with the wrong public key, hence, potential disclosure of
confidential data to others.
The old stable distribution (woody) does not contain enigmail packages.
For the stable distribution (sarge) this problem has been fixed in
version 0.91-4sarge2.
For the unstable distribution (sid) this problem has been fixed in
version 0.93-1.
We recommend that you upgrade your enigmail packages.
CPE | Name | Operator | Version |
---|---|---|---|
enigmail | eq | 2:0.91-4 | |
enigmail | eq | 2:0.91-4sarge1 |