CVE-2006-0455

Published: Feb 15, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".

Affected (23)

Products: Gnu: Privacy Guard

Gnu

1 product

Privacy Guard

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Gnu Privacy Guard	Version 1.0.1
Gnu Privacy Guard	Version 1.0.2
Gnu Privacy Guard	Version 1.0.3
Gnu Privacy Guard	Version 1.0.3b
Gnu Privacy Guard	Version 1.0.4
Gnu Privacy Guard	Version 1.0.5
Gnu Privacy Guard	Version 1.0.6
Gnu Privacy Guard	Version 1.0.7
Gnu Privacy Guard	Version 1.0
Gnu Privacy Guard	Version 1.2.1
Gnu Privacy Guard	Version 1.2.2
Gnu Privacy Guard	Version 1.2.2 rc1
Gnu Privacy Guard	Version 1.2.3
Gnu Privacy Guard	Version 1.2.4
Gnu Privacy Guard	Version 1.2.5
Gnu Privacy Guard	Version 1.2.6
Gnu Privacy Guard	Version 1.2.7
Gnu Privacy Guard	Version 1.2
Gnu Privacy Guard	Version 1.3.3
Gnu Privacy Guard	Version 1.3.4
Gnu Privacy Guard	Version 1.4.1
Gnu Privacy Guard	Version 1.4.2
Gnu Privacy Guard	Version 1.4

References (64)

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)

Source: secalert@redhat.com

http://fedoranews.org/updates/FEDORA-2006-116.shtml

Source: secalert@redhat.com

http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000211.html

Source: secalert@redhat.com

http://marc.info/?l=gnupg-devel&m=113999098729114&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/18845

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18933

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18934

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18942

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18955

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18956

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18968

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/19130

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19249

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19532

Source: secalert@redhat.com

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200602-10.xml

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:043

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_09_gpg.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2006_13_gpg.html

Source: secalert@redhat.com

http://www.openpkg.org/security/OpenPKG-SA-2006.001-gnupg.html

Source: secalert@redhat.com

Vendor Advisory

http://www.osvdb.org/23221

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0266.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/425289/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/433931/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16663

Source: secalert@redhat.com

ExploitPatch

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477

Source: secalert@redhat.com

Patch

http://www.trustix.org/errata/2006/0008

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-252-1

Source: secalert@redhat.com

http://www.us.debian.org/security/2006/dsa-978

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2006/0610

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24744

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10084

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)