GnuPG Short Key ID Security Bypass Vulnerability

Bugtraq ID:	55571
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 17 2012 12:00AM
Updated:	Sep 17 2012 12:00AM
Credit:	Ubuntu
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 GnuPG GnuPG 3.1.3 GnuPG GnuPG 2.0.17 GnuPG GnuPG 2.0.16 GnuPG GnuPG 2.0.16 GnuPG GnuPG 2.0.15 GnuPG GnuPG 2.0.14 GnuPG GnuPG 2.0.13 GnuPG GnuPG 2.0.11 GnuPG GnuPG 2.0.10 GnuPG GnuPG 2.0.8 GnuPG GnuPG 2.0.7 GnuPG GnuPG 1.5.2 GnuPG GnuPG 1.4.10 GnuPG GnuPG 1.4.8 GnuPG GnuPG 1.4.5 GnuPG GnuPG 1.4.2 GnuPG GnuPG 2.0.6 GnuPG GnuPG 2.0.5 GnuPG GnuPG 2.0.3 GnuPG GnuPG 2.0.12 GnuPG GnuPG 2.0.1 GnuPG GnuPG 2.0 GnuPG GnuPG 1.4.4 GnuPG GnuPG 1.4.0
Not Vulnerable:

GnuPG Short Key ID Security Bypass Vulnerability

GnuPG is prone to a security-bypass vulnerability.

Attackers may exploit the issue to bypass certain security restrictions and gain unauthorized access.

GnuPG Short Key ID Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GnuPG Short Key ID Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

GnuPG Short Key ID Security Bypass Vulnerability

References:

• GnuPG Homepage (GnuPG)