Lucene search

Veracode Vulnerability DatabaseVERACODE:11418

HistoryJan 15, 2019 - 9:01 a.m.

Wrong GPG Key Selection

2019-01-1509:01:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

Evolution is vulnerable to wrong GPG key selection. Due to a flaw in the way of GnuPG public keys selection, the package causes the emails being encrypted with public keys other than the one belonging to the intended recipient.

CPENameOperatorVersion
pidgineq2.7.9__3.el6.2
pidgineq2.7.9__5.el6.2
pidgineq2.6.6__5.el6
pidgineq2.7.9__3.el6
pidgineq2.7.9__10.el6_4.1
pidgineq2.6.6__6.el6_0
control-centereq2.28.1__37.el6
control-centereq2.28.1__25.el6
control-centereq2.28.1__38.el6
gnome-paneleq2.30.2__5.el6

Name	Operator	Version
pidgin	eq	2.7.9__3.el6.2
pidgin	eq	2.7.9__5.el6.2
pidgin	eq	2.6.6__5.el6
pidgin	eq	2.7.9__3.el6
pidgin	eq	2.7.9__10.el6_4.1
pidgin	eq	2.6.6__6.el6_0
control-center	eq	2.28.1__37.el6
control-center	eq	2.28.1__25.el6
control-center	eq	2.28.1__38.el6
gnome-panel	eq	2.30.2__5.el6

Rows per page:

1-10 of 621

References

rhn.redhat.com/errata/RHSA-2013-1540.html

seclists.org/oss-sec/2013/q3/191

access.redhat.com/errata/RHSA-2013:1540

access.redhat.com/security/cve/CVE-2013-4166

access.redhat.com/security/updates/classification/#low

bugzilla.redhat.com/show_bug.cgi?id=1000323

bugzilla.redhat.com/show_bug.cgi?id=1000325

bugzilla.redhat.com/show_bug.cgi?id=1005072

bugzilla.redhat.com/show_bug.cgi?id=1014677

bugzilla.redhat.com/show_bug.cgi?id=589263

bugzilla.redhat.com/show_bug.cgi?id=602667

bugzilla.redhat.com/show_bug.cgi?id=615969

bugzilla.redhat.com/show_bug.cgi?id=619842

bugzilla.redhat.com/show_bug.cgi?id=624851

bugzilla.redhat.com/show_bug.cgi?id=626690

bugzilla.redhat.com/show_bug.cgi?id=628174

bugzilla.redhat.com/show_bug.cgi?id=630314

bugzilla.redhat.com/show_bug.cgi?id=665967

bugzilla.redhat.com/show_bug.cgi?id=667081

bugzilla.redhat.com/show_bug.cgi?id=670917

bugzilla.redhat.com/show_bug.cgi?id=683402

bugzilla.redhat.com/show_bug.cgi?id=689429

bugzilla.redhat.com/show_bug.cgi?id=692658

bugzilla.redhat.com/show_bug.cgi?id=694134

bugzilla.redhat.com/show_bug.cgi?id=694142

bugzilla.redhat.com/show_bug.cgi?id=696620

bugzilla.redhat.com/show_bug.cgi?id=698243

bugzilla.redhat.com/show_bug.cgi?id=698246

bugzilla.redhat.com/show_bug.cgi?id=700726

bugzilla.redhat.com/show_bug.cgi?id=700733

bugzilla.redhat.com/show_bug.cgi?id=700789

bugzilla.redhat.com/show_bug.cgi?id=702608

bugzilla.redhat.com/show_bug.cgi?id=724843

bugzilla.redhat.com/show_bug.cgi?id=737865

bugzilla.redhat.com/show_bug.cgi?id=739968

bugzilla.redhat.com/show_bug.cgi?id=750916

bugzilla.redhat.com/show_bug.cgi?id=772652

bugzilla.redhat.com/show_bug.cgi?id=804651

bugzilla.redhat.com/show_bug.cgi?id=809542

bugzilla.redhat.com/show_bug.cgi?id=810460

bugzilla.redhat.com/show_bug.cgi?id=811980

bugzilla.redhat.com/show_bug.cgi?id=813266

bugzilla.redhat.com/show_bug.cgi?id=815363

bugzilla.redhat.com/show_bug.cgi?id=815371

bugzilla.redhat.com/show_bug.cgi?id=832973

bugzilla.redhat.com/show_bug.cgi?id=838750

bugzilla.redhat.com/show_bug.cgi?id=857003

bugzilla.redhat.com/show_bug.cgi?id=903728

bugzilla.redhat.com/show_bug.cgi?id=905591

bugzilla.redhat.com/show_bug.cgi?id=906267

bugzilla.redhat.com/show_bug.cgi?id=906341

bugzilla.redhat.com/show_bug.cgi?id=909259

bugzilla.redhat.com/show_bug.cgi?id=919002

bugzilla.redhat.com/show_bug.cgi?id=949610

bugzilla.redhat.com/show_bug.cgi?id=950005

bugzilla.redhat.com/show_bug.cgi?id=951118

bugzilla.redhat.com/show_bug.cgi?id=955587

bugzilla.redhat.com/show_bug.cgi?id=956064

bugzilla.redhat.com/show_bug.cgi?id=956510

bugzilla.redhat.com/show_bug.cgi?id=962331

bugzilla.redhat.com/show_bug.cgi?id=962499

bugzilla.redhat.com/show_bug.cgi?id=970013

bugzilla.redhat.com/show_bug.cgi?id=971073

bugzilla.redhat.com/show_bug.cgi?id=971496

bugzilla.redhat.com/show_bug.cgi?id=971621

bugzilla.redhat.com/show_bug.cgi?id=973276

bugzilla.redhat.com/show_bug.cgi?id=973279

bugzilla.redhat.com/show_bug.cgi?id=973281

bugzilla.redhat.com/show_bug.cgi?id=973284

bugzilla.redhat.com/show_bug.cgi?id=973285

bugzilla.redhat.com/show_bug.cgi?id=973287

bugzilla.redhat.com/show_bug.cgi?id=973288

bugzilla.redhat.com/show_bug.cgi?id=973289

bugzilla.redhat.com/show_bug.cgi?id=973728

bugzilla.redhat.com/show_bug.cgi?id=974234

bugzilla.redhat.com/show_bug.cgi?id=974647

bugzilla.redhat.com/show_bug.cgi?id=975394

bugzilla.redhat.com/show_bug.cgi?id=977292

bugzilla.redhat.com/show_bug.cgi?id=977395

bugzilla.redhat.com/show_bug.cgi?id=978525

bugzilla.redhat.com/show_bug.cgi?id=983964

bugzilla.redhat.com/show_bug.cgi?id=991074

git.gnome.org/browse/evolution-data-server/commit/?h=gnome-3-8&id=f7059bb37dcce485d36d769142ec9515708d8ae5

git.gnome.org/browse/evolution-data-server/commit/?id=5d8b92c622f6927b253762ff9310479dd3ac627d

rhn.redhat.com/errata/RHSA-2013-1540.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

Related for VERACODE:11418