CVE-2006-3082 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-3082
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3082

Description: parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/27245 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-304-1 SUSE http://www.novell.com/linux/security/advisories/2006_38_security.html http://www.novell.com/linux/security/advisories/2006_18_sr.html ST 1016519 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.457382 SGI SAID Secunia Advisory: SA20783 Secunia Advisory: SA20829 Secunia Advisory: SA20801 Secunia Advisory: SA20811 Secunia Advisory: SA20881 Secunia Advisory: SA20899 Secunia Advisory: SA20968 Secunia Advisory: SA21063 Secunia Advisory: SA21143 Secunia Advisory: SA21137 Secunia Advisory: SA21135 Secunia Advisory: SA21585 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0571.html OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.010.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:110 FULLDISC http://seclists.org/lists/fulldisclosure/2006/May/0782.html http://seclists.org/lists/fulldisclosure/2006/May/0789.html http://seclists.org/lists/fulldisclosure/2006/May/0774.html DEBIAN http://www.debian.org/security/2006/dsa-1115 http://www.debian.org/security/2006/dsa-1107 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/438751/100/0/threaded BID 18554

Return to the previous page.