CVE-2006-6235

Published: Dec 7, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Affected (32)

Products: Gnu: Privacy Guard · Gpg4win: Gpg4win · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core, Linux Advanced Workstation · +3 more

Show all products

Gnu: Privacy Guard · Gpg4win: Gpg4win · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core, Linux Advanced Workstation · Rpath: Linux · Slackware: Slackware Linux · Ubuntu: Ubuntu Linux

1 product

1 product

4 products

Enterprise Linux Desktop

Fedora Core

Linux Advanced Workstation

1 product

1 product

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Gnu Privacy Guard	Version 1.2.4
Gnu Privacy Guard	Version 1.2.5
Gnu Privacy Guard	Version 1.2.6
Gnu Privacy Guard	Version 1.2.7
Gnu Privacy Guard	Version 1.3.3
Gnu Privacy Guard	Version 1.3.4
Gnu Privacy Guard	Version 1.4.1
Gnu Privacy Guard	Version 1.4.2.1
Gnu Privacy Guard	Version 1.4.2.2
Gnu Privacy Guard	Version 1.4.2
Gnu Privacy Guard	Version 1.4.3
Gnu Privacy Guard	Version 1.4.4
Gnu Privacy Guard	Version 1.4.5
Gnu Privacy Guard	Version 1.4
Gnu Privacy Guard	Version 1.9.10
Gnu Privacy Guard	Version 1.9.15
Gnu Privacy Guard	Version 1.9.20
Gnu Privacy Guard	Version 2.0.1
Gnu Privacy Guard	Version 2.0
Gpg4win Gpg4win	Version 1.0.7

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Fedora Core	Version core6
Redhat Fedora Core	Version core_5.0
Redhat Linux Advanced Workstation	Version 2.1
Rpath Linux	Version 1
Slackware Slackware Linux	Version 11.0
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 6.06

References (70)

ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html

Source: cve@mitre.org

http://secunia.com/advisories/23245

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/23250

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/23255

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/23259

Source: cve@mitre.org

http://secunia.com/advisories/23269

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/23284

Source: cve@mitre.org

http://secunia.com/advisories/23290

Source: cve@mitre.org

http://secunia.com/advisories/23299

Source: cve@mitre.org

http://secunia.com/advisories/23303

Source: cve@mitre.org

http://secunia.com/advisories/23329

Source: cve@mitre.org

http://secunia.com/advisories/23335

Source: cve@mitre.org

http://secunia.com/advisories/23513

Source: cve@mitre.org

http://secunia.com/advisories/24047

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200612-03.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017349

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1231

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/427009

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:228

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_28_sr.html

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0754.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/453664/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/453723/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21462

Source: cve@mitre.org

Vendor Advisory

http://www.trustix.org/errata/2006/0070

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-393-1

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-393-2

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4881

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30711

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-835

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc (unsafe URL)