Vulnerability CVE-2006-0455 - CERT Civis.Net

Vulnerability Name:

CVE-2006-0455 (CCN-24744)

Assigned:

2006-02-15

Published:

2006-02-15

Updated:

2023-02-13

Summary:

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded.
Note: this also occurs when running the equivalent command "gpg --verify".

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
3.4 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Consequences:

Other

References:

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: SGI Security Advisory 20060401-01-U
SGI Advanced Linux Environment 3 Security Update #56

Source: MITRE
Type: CNA
CVE-2006-0455

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: gnupg-announce Mailing List, Wed Feb 15 08:49:25 CET 2006
False positive signature verification in GnuPG

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: RHSA-2006-0266
gnupg security update

Source: CCN
Type: SA18845
GnuPG "gpgv" Signature Verification Security Issue

Source: CCN
Type: ASA-2006-070
gnupg security update (RHSA-2006-0266)

Source: DEBIAN
Type: DSA-978
gnupg -- programming error

Source: CCN
Type: GLSA-200602-08
libtasn1, GNU TLS: Security flaw in DER decoding

Source: CCN
Type: GLSA-200602-10
GnuPG: Incorrect signature verification

Source: secalert@redhat.com
Type: Patch, Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: Patch, Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: OpenPKG-SA-2006.001
GnuPG

Source: secalert@redhat.com
Type: Vendor Advisory
secalert@redhat.com

Source: CCN
Type: OSVDB ID: 23221
GnuPG gpgv Detached Signature Verification Failure

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: BID-16663
GnuPG Detached Signature Verification Bypass Vulnerability

Source: secalert@redhat.com
Type: Exploit, Patch
secalert@redhat.com

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: USN-252-1
gnupg vulnerability

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: Patch, Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: XF
Type: UNKNOWN
gnupg-gpgv-improper-verification(24744)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: SUSE
Type: SUSE-SA:2006:009
gpg/liby2util incorrect gpg signature checking

Source: SUSE
Type: SUSE-SA:2006:013
gpg / liby2util signature checking problems

Source: SUSE
Type: SUSE-SA:2006:014
gpg signature checking problems

Source: SUSE
Type: SUSE-SR:2006:005
SUSE Security Summary Report

Vulnerable Configuration:

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration CCN 1:

cpe:/a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.3:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.3.3:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.6:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.2:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.4:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.5:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.6:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.2.7:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.3.4:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.4:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.4.1:*:*:*:*:*:*:*

OR cpe:/a:gnu:privacy_guard:1.4.2:*:*:*:*:*:*:*

AND

cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*

OR cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:novell:linux_desktop:9:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*

OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*

OR cpe:/a:mandrakesoft:mandrake_multi_network_firewall:2.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:10.0::oss:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*

OR cpe:/a:openpkg:openpkg:2.5:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1::x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2006::x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64:*:*:*:*:*

OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*

OR cpe:/o:novell:open_enterprise_server:1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.3:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20060455	V	CVE-2006-0455	2022-06-30
oval:org.opensuse.security:def:112155	P	dirmngr-2.2.27-2.4 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105691	P	dirmngr-2.2.27-2.4 on GA media (Moderate)	2021-10-01
oval:org.mitre.oval:def:10084	V	gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".	2013-04-29
oval:com.redhat.rhsa:def:20060266	P	RHSA-2006:0266: gnupg security update (Important)	2006-03-15