CVE-2006-0049

gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...

GnuPG unsigned data injection

While decoding non-detached with signature within text messages unsigned data behind signature is invalidely decoded as a part of the messages...

CVE-2006-0455

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also...

GnuPG 1.x - Detached Signature Verification Bypass

source: https://www.securityfocus.com/bid/16663/info GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verification process has failed. Exploiting this issue allows...

gnupg -- false positive signature verification

Werner Koch reports: The Gentoo project identified a security related bug in GnuPG. When using any current version of GnuPG for unattended signature verification e.g. by scripts and mail programs, false positive signature verification of detached signatures may occur. This problem affects the too...

CVE-2001-0071

gpg aka GnuPG 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection...

CVE-2001-0071

gpg aka GnuPG 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection...

[SECURITY] [DSA-010-1] two gpg problems

Package : gnupg Problem type : cheating with detached signatures, circumvention of web of trust Debian-specific: no Two bugs in GnuPG have recently been found: 1. false positives when verifying detached signatures - ----------------------------------------------------- There is a problem in the w...

[RHSA-2000:131-02] Updated gnupg packages now available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated gnupg packages now available Advisory ID: RHSA-2000:131-02 Issue date: 2000-12-19 Updated on: 2000-12-19 Product: Red Hat Linux Keywords: gnupg secret-key web-of-trust...