Lucene search
Ubuntu.comUB:CVE-2007-1269HistoryMar 06, 2007 - 12:00 a.m.
CVE-2007-1269
2007-03-0600:00:00
ubuntu.com
ubuntu.com
10
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.325
Percentile
97.1%
GNUMail 1.1.2 and earlier does not properly use the --status-fd argument
when invoking GnuPG, which prevents GNUMail from visually distinguishing
between signed and unsigned portions of OpenPGP messages with multiple
components, which allows remote attackers to forge the contents of a
message without detection.
Notes
| Author | Note |
|---|---|
| fujitsu | Not important, as GnuPG was fixed in CVE-2007-1263. |
Related
nessus
nessus
Debian DSA-1266-1 : gnupg - several vulnerabilities
2007-03-16 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 9.0 / 9.1 : gnupg (SSA:2007-066-01)
2007-03-12 00:00:00
Ubuntu 6.06 LTS / 6.10 : gnupg2, gpgme1.0 vulnerability (USN-432-2)
2007-11-10 00:00:00
openvas
openvas
Ubuntu Update for gnupg vulnerability USN-432-1
2009-03-23 00:00:00
SLES9: Security update for gpg
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-432-1)
2009-03-23 00:00:00
slackware
slackware
[slackware-security] gnupg
2007-03-08 02:35:56
cve
cve
CVE-2007-1263
2007-03-06 20:19:00
CVE-2007-1269
2007-03-06 20:19:00
debian
debian
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
2007-03-13 22:55:27
redhat
redhat
(RHSA-2007:0106) Important: gnupg security update
2007-03-06 00:00:00
(RHSA-2007:0107) Important: gnupg security update
2007-03-13 00:00:00
suse
suse
signature bypassing in gpg
2007-03-30 16:10:46
nvd
nvd
CVE-2007-1263
2007-03-06 20:19:00
CVE-2007-1269
2007-03-06 20:19:00
exploitdb
exploitdb
GnuPG 1.x - Signed Message Arbitrary Content Injection
2007-03-05 00:00:00
centos
centos
gnupg security update
2007-03-06 11:23:21
gnupg security update
2007-03-07 01:28:25
cvelist
cvelist
CVE-2007-1263
2007-03-06 20:00:00
CVE-2007-1269
2007-03-06 20:00:00
oraclelinux
oraclelinux
Important: gnupg security update
2007-06-26 00:00:00
Important: gnupg security update
2007-03-06 00:00:00
prion
prion
Design/Logic Flaw
2007-03-06 20:19:00
Design/Logic Flaw
2007-03-06 20:19:00
debiancve
debiancve
CVE-2007-1263
2007-03-06 20:19:00
CVE-2007-1269
2007-03-06 20:19:00
ubuntu
ubuntu
GnuPG2, GPGME vulnerability
2007-03-13 00:00:00
GnuPG vulnerability
2007-03-08 00:00:00
ubuntucve
ubuntucve
securityvulns
securityvulns
Unsigned content spoofing in multiple application launching GnuPG
2007-03-06 00:00:00
coresecurity
coresecurity
GnuPG and GnuPG clients unsigned data injection vulnerability
2007-03-05 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.325
Percentile
97.1%
Related for UB:CVE-2007-1269