10

CVE-2003-0255

The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Privacy Guard Version <= 1.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.56% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694
http://marc.info/?l=bugtraq&m=105215110111174&w=2
http://marc.info/?l=bugtraq&m=105301357425157&w=2
http://marc.info/?l=bugtraq&m=105311804129104&w=2
http://marc.info/?l=bugtraq&m=105362224514081&w=2
http://www.kb.cert.org/vuls/id/397604
US Government Resource
http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html
http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html
http://www.mandriva.com/security/advisories?name=MDKSA-2003:061
http://www.osvdb.org/4947
http://www.redhat.com/support/errata/RHSA-2003-175.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-176.html
http://www.securityfocus.com/bid/7497
http://www.turbolinux.com/security/TLSA-2003-34.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/11930
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A135