SuSE YaST Online Update Script Signature Verification Bypass Vulnerability

Bugtraq ID:	16889
Class:	Design Error
CVE:	CVE-2006-0803
Remote:	Yes
Local:	No
Published:	Feb 20 2006 12:00AM
Updated:	Dec 14 2006 06:43PM
Credit:	Announced by the vendor.
Vulnerable:	SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux Desktop 1.0

Not Vulnerable: