CVE-2003-0255

Published: May 27, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.

Affected (1)

Products: Gnu: Privacy Guard

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Privacy Guard	Up to 1.2.1

References (32)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105215110111174&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105301357425157&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105311804129104&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105362224514081&w=2

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/397604

Source: cve@mitre.org

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html

Source: cve@mitre.org

http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:061

Source: cve@mitre.org

http://www.osvdb.org/4947

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-175.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2003-176.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/7497

Source: cve@mitre.org

http://www.turbolinux.com/security/TLSA-2003-34.txt

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11930

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A135

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105215110111174&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105301357425157&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105311804129104&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105362224514081&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/397604

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2003:061

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/4947

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-175.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2003-176.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/7497

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.turbolinux.com/security/TLSA-2003-34.txt

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11930

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A135

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.