|
|
GnuPG Signed Message Arbitrary Content Injection Weakness
|
Bugtraq ID:
|
22757
|
|
Class:
|
Design Error
|
|
CVE:
|
CVE-2007-1263
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Mar 05 2007 12:00AM
|
|
Updated:
|
May 23 2007 09:37PM
|
|
Credit:
|
This vulnerability was found by Gerardo Richarte from Core Security Technologies.
|
|
Vulnerable:
|
Ubuntu Ubuntu Linux 5.10 sparc
Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 6.10 sparc
Ubuntu Ubuntu Linux 6.10 powerpc
Ubuntu Ubuntu Linux 6.10 i386
Ubuntu Ubuntu Linux 6.10 amd64
Ubuntu Ubuntu Linux 6.06 LTS sparc
Ubuntu Ubuntu Linux 6.06 LTS powerpc
Ubuntu Ubuntu Linux 6.06 LTS i386
Ubuntu Ubuntu Linux 6.06 LTS amd64
Trustix Secure Linux 3.0.5
Trustix Secure Linux 3.0
Slackware Linux 10.2
Slackware Linux 10.1
Slackware Linux 10.0
Slackware Linux 9.1
Slackware Linux 9.0
Slackware Linux 11.0
SGI ProPack 3.0 SP6
S.u.S.E. UnitedLinux 1.0
S.u.S.E. SuSE Linux Standard Server 8.0
S.u.S.E. SuSE Linux School Server for i386
S.u.S.E. SUSE LINUX Retail Solution 8.0
S.u.S.E. SuSE Linux Openexchange Server 4.0
S.u.S.E. SUSE Linux Enterprise Desktop 10
S.u.S.E. openSUSE 10.2
S.u.S.E. Open-Enterprise-Server 0
S.u.S.E. Novell Linux POS 9
S.u.S.E. Novell Linux Desktop 1.0
S.u.S.E. Novell Linux Desktop 9
S.u.S.E. Linux Enterprise Server 9
S.u.S.E. Linux Enterprise Server 8
S.u.S.E. Linux Enterprise Server 10
S.u.S.E. Linux 9.3 x86-64
S.u.S.E. Linux 9.3 x86
S.u.S.E. Linux 10.1 x86-64
S.u.S.E. Linux 10.1 x86
S.u.S.E. Linux 10.1 ppc
S.u.S.E. Linux 10.0 x86-64
S.u.S.E. Linux 10.0 x86
S.u.S.E. Linux 10.0 ppc
rPath rPath Linux 1
RedHat Enterprise Linux WS 4
RedHat Enterprise Linux WS 3
RedHat Enterprise Linux WS 2.1
RedHat Enterprise Linux ES 4
RedHat Enterprise Linux ES 3
RedHat Enterprise Linux ES 2.1
RedHat Enterprise Linux Desktop 5 client
RedHat Enterprise Linux AS 4
RedHat Enterprise Linux AS 3
RedHat Enterprise Linux AS 2.1 IA64
RedHat Enterprise Linux AS 2.1
RedHat Enterprise Linux 5 server
RedHat Desktop 4.0
RedHat Desktop 3.0
MandrakeSoft Multi Network Firewall 2.0
MandrakeSoft Linux Mandrake 2006.0 x86_64
MandrakeSoft Linux Mandrake 2006.0
MandrakeSoft Linux Mandrake 2007.0 x86_64
MandrakeSoft Linux Mandrake 2007.0
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 4.0
GNU GNU Privacy Guard 1.4.6
GNU GNU Privacy Guard 1.4.5
GNU GNU Privacy Guard 1.4.4
GNU GNU Privacy Guard 1.4.3
GNU GNU Privacy Guard 1.4.2 2
GNU GNU Privacy Guard 1.4.2 .1
GNU GNU Privacy Guard 1.4.2
GNU GNU Privacy Guard 1.4.1
GNU GNU Privacy Guard 1.4
GNU GNU Privacy Guard 1.3.4
GNU GNU Privacy Guard 1.3.3
GNU GNU Privacy Guard 1.2.7
GNU GNU Privacy Guard 1.2.6
GNU GNU Privacy Guard 1.2.5
GNU GNU Privacy Guard 1.2.4
+
MandrakeSoft Corporate Server 3.0 x86_64
+
MandrakeSoft Corporate Server 3.0
+
MandrakeSoft Linux Mandrake 10.1 x86_64
+
MandrakeSoft Linux Mandrake 10.1
+
MandrakeSoft Linux Mandrake 10.0 AMD64
+
MandrakeSoft Linux Mandrake 10.0
GNU GNU Privacy Guard 1.2.3
+
Conectiva Linux 9.0
+
MandrakeSoft Linux Mandrake 9.2
+
Turbolinux Turbolinux Desktop 10.0
GNU GNU Privacy Guard 1.2.2 -rc1
+
S.u.S.E. Linux Personal 8.2
GNU GNU Privacy Guard 1.2.2 -r1
+
Gentoo Linux 1.4 _rc3
+
Gentoo Linux 1.4 _rc2
+
Gentoo Linux 1.4 _rc1
GNU GNU Privacy Guard 1.2.2
GNU GNU Privacy Guard 1.2.1
+
Conectiva Linux 9.0
+
OpenPKG OpenPKG 1.2
+
RedHat Linux 9.0 i386
+
Terra Soft Solutions Yellow Dog Linux 3.0
GNU GNU Privacy Guard 1.2
GNU GNU Privacy Guard 1.1
GNU GNU Privacy Guard 1.0.7
+
Conectiva Linux 8.0
+
Conectiva Linux 7.0
+
MandrakeSoft apcupsd 2006.0
+
MandrakeSoft Corporate Server 2.1 x86_64
+
MandrakeSoft Corporate Server 2.1
+
MandrakeSoft Linux Mandrake 9.0
+
MandrakeSoft Linux Mandrake 8.2 ppc
+
MandrakeSoft Linux Mandrake 8.2
+
MandrakeSoft Multi Network Firewall 2.0
+
OpenPKG OpenPKG 1.1
+
RedHat Enterprise Linux AS 2.1 IA64
+
RedHat Enterprise Linux AS 2.1
+
RedHat Enterprise Linux ES 2.1 IA64
+
RedHat Enterprise Linux ES 2.1
+
RedHat Enterprise Linux WS 2.1 IA64
+
RedHat Enterprise Linux WS 2.1
+
RedHat Linux 8.0 i386
+
RedHat Linux 7.3 i386
+
RedHat Linux 7.2 ia64
+
RedHat Linux 7.2 i386
+
RedHat Linux 7.1 i386
+
RedHat Linux Advanced Work Station 2.1
+
Sun Linux 5.0.5
+
Turbolinux Turbolinux Server 8.0
+
Turbolinux Turbolinux Server 7.0
+
Turbolinux Turbolinux Server 6.5
+
Turbolinux Turbolinux Server 6.1
+
Turbolinux Turbolinux Workstation 8.0
+
Turbolinux Turbolinux Workstation 7.0
+
Turbolinux Turbolinux Workstation 6.0
GNU GNU Privacy Guard 1.0.6
GNU GNU Privacy Guard 1.0.5
GNU GNU Privacy Guard 1.0.4
-
Turbolinux Turbolinux 6.0.5
-
Turbolinux Turbolinux Server 6.5
-
Turbolinux Turbolinux Workstation 6.1
GNU GNU Privacy Guard 1.0.3 b
GNU GNU Privacy Guard 1.0.3
GNU GNU Privacy Guard 1.0.2
GNU GNU Privacy Guard 1.0.1
GNU GNU Privacy Guard 1.0 .6
-
MandrakeSoft Corporate Server 1.0.1
-
MandrakeSoft Linux Mandrake 8.1
-
MandrakeSoft Linux Mandrake 8.0 ppc
-
MandrakeSoft Linux Mandrake 8.0
-
MandrakeSoft Linux Mandrake 7.2
-
MandrakeSoft Linux Mandrake 7.1
GNU GNU Privacy Guard 1.0
GNU finger 1.0.7
Debian Linux 3.1 sparc
Debian Linux 3.1 s/390
Debian Linux 3.1 ppc
Debian Linux 3.1 mipsel
Debian Linux 3.1 mips
Debian Linux 3.1 m68k
Debian Linux 3.1 ia-64
Debian Linux 3.1 ia-32
Debian Linux 3.1 hppa
Debian Linux 3.1 arm
Debian Linux 3.1 amd64
Debian Linux 3.1 alpha
Debian Linux 3.1
Avaya SES 3.0
Avaya SES 2.0
Avaya Messaging Storage Server MM3.0
Avaya Messaging Storage Server 2.0
Avaya Messaging Storage Server 1.0
Avaya Messaging Storage Server
Avaya EMMC 0
Avaya Converged Communications Server 2.0
Avaya Communication Manager 2.0.1
Avaya Communication Manager 2.0
+
Avaya Communication Manager Server DEFINITY Server SI/CS
+
Avaya Communication Manager Server S8100
+
Avaya Communication Manager Server S8100
+
Avaya Communication Manager Server S8300
+
Avaya Communication Manager Server S8300
+
Avaya Communication Manager Server S8500
+
Avaya Communication Manager Server S8500
+
Avaya Communication Manager Server S8700
+
Avaya Communication Manager Server S8700
Avaya Communication Manager 4.0
Avaya Communication Manager 3.0
+
Avaya Communication Manager Server DEFINITY Server SI/CS
+
Avaya Communication Manager Server S8100
+
Avaya Communication Manager Server S8100
+
Avaya Communication Manager Server S8300
+
Avaya Communication Manager Server S8300
+
Avaya Communication Manager Server S8500
+
Avaya Communication Manager Server S8500
+
Avaya Communication Manager Server S8700
+
Avaya Communication Manager Server S8700
Avaya AES 4.0
Avaya AES 3.1
|
|
|
|
Not Vulnerable:
|
GNU GNU Privacy Guard 1.4.7
|
|
|
