Revision Date: | 2022-06-30 | Version: | 1 |
Title: | CVE-2006-0455 |
Description: |
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".
|
Family: | unix | Class: | vulnerability |
Status: | | Reference(s): | CVE-2006-0455 Mitre CVE-2006-0455 SUSE CVE-2006-0455 SUSE-SA:2006:009 SUSE-SA:2006:013 SUSE-SR:2006:005
|
Platform(s): | Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 openSUSE Tumbleweed SUSE CORE 9 for AMD64 and Intel EM64T SUSE CORE 9 for IBM POWER SUSE CORE 9 for IBM S/390 31bit SUSE CORE 9 for IBM zSeries 64bit SUSE CORE 9 for Itanium Processor Family SUSE CORE 9 for x86
| Product(s): | |
Definition Synopsis |
Release Information sles9-nld is installed
AND gpg less than 1.2.4-68.10
OR Package Information
sles9-nld is installed
AND gpg2 less than 1.9.10-2.4
|
Definition Synopsis |
core9 is installed
AND gpg less than 1.2.4-68.10
|
Definition Synopsis |
openSUSE Tumbleweed is installed
AND Package Information
dirmngr-2.2.27-2.4 is installed
OR gpg2-2.2.27-2.4 is installed
OR gpg2-lang-2.2.27-2.4 is installed
|