CVE-2006-0049

Published: 13 March 2006

gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.

Status

References

• https://ubuntu.com/security/notices/USN-264-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0049
• NVD
• Launchpad
• Debian