Lucene search
Ubuntu.comUB:CVE-2007-1266HistoryMar 06, 2007 - 12:00 a.m.
CVE-2007-1266
2007-03-0600:00:00
ubuntu.com
ubuntu.com
3
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.064 Low
EPSS
Percentile
93.6%
Evolution 2.8.1 and earlier does not properly use the --status-fd argument
when invoking GnuPG, which prevents Evolution from visually distinguishing
between signed and unsigned portions of OpenPGP messages with multiple
components, which allows remote attackers to forge the contents of a
message without detection.
Notes
| Author | Note |
|---|---|
| kees | feature-request not security issue since gpg is fixed with CVE-2007-1263 |
Related
prion
prion
Design/Logic Flaw
2007-03-06 20:19:00
Design/Logic Flaw
2007-03-06 20:19:00
debiancve
debiancve
CVE-2007-1266
2007-03-06 20:19:00
CVE-2007-1263
2007-03-06 20:19:00
nessus
nessus
Oracle Linux 3 / 4 : gnupg (ELSA-2007-0106)
2013-07-12 00:00:00
Fedora Core 5 : gnupg-1.4.7-1 (2007-316)
2007-03-16 00:00:00
Oracle Linux 5 : gnupg (ELSA-2007-0107)
2013-07-12 00:00:00
openvas
openvas
SuSE Update for gpg SUSE-SA:2007:024
2009-01-28 00:00:00
Mandriva Update for gnupg MDKSA-2007:059 (gnupg)
2009-04-09 00:00:00
Ubuntu Update for gnupg vulnerability USN-432-1
2009-03-23 00:00:00
redhat
redhat
(RHSA-2007:0107) Important: gnupg security update
2007-03-13 00:00:00
(RHSA-2007:0106) Important: gnupg security update
2007-03-06 00:00:00
cve
cve
CVE-2007-1266
2007-03-06 20:19:00
CVE-2007-1263
2007-03-06 20:19:00
suse
suse
signature bypassing in gpg
2007-03-30 16:10:46
oraclelinux
oraclelinux
Important: gnupg security update
2007-03-06 00:00:00
Important: gnupg security update
2007-06-26 00:00:00
ubuntucve
ubuntucve
ubuntu
ubuntu
GnuPG2, GPGME vulnerability
2007-03-13 00:00:00
GnuPG vulnerability
2007-03-08 00:00:00
debian
debian
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
2007-03-13 22:55:27
slackware
slackware
[slackware-security] gnupg
2007-03-08 02:35:56
centos
centos
gnupg security update
2007-03-07 01:28:25
gnupg security update
2007-03-06 11:23:21
securityvulns
securityvulns
Unsigned content spoofing in multiple application launching GnuPG
2007-03-06 00:00:00
coresecurity
coresecurity
GnuPG and GnuPG clients unsigned data injection vulnerability
2007-03-05 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.064 Low
EPSS
Percentile
93.6%
Related for UB:CVE-2007-1266