SUSE CVE-2003-0255

The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path...

Mandrake Linux Security Advisory : gnupg (MDKSA-2003:061)

A bug was discovered in GnuPG versions 1.2.1 and earlier. When gpg evaluates trust values for different UIDs assigned to a key, it would incorrectly associate the trust value of the UID with the highest trust value with every other UID assigned to that key. This prevents a warning message from...

CVE-2003-0255

GnuPG contains a vulnerability (CVE-2003-0255) where the key validation logic in versions prior to 1.2.2 incorrectly determines the validity of keys with multiple user IDs, effectively assigning the highest trust value to all UIDs on a key. This can prevent warning prompts when encrypting to a ke...