GNU Privacy Guard Insecure Trust Path To User ID Weakness

BID:7497

Info

GNU Privacy Guard Insecure Trust Path To User ID Weakness

Bugtraq ID: 7497
Class: Origin Validation Error
CVE: CVE-2003-0255
Remote: No
Local: Yes
Published: May 05 2003 12:00AM
Updated: Jul 11 2009 09:07PM
Credit: This weakness was disclosed by the vendor.
Vulnerable: Sun Cobalt RaQ XTR
SCO OpenLinux Workstation 3.1.1
SCO OpenLinux Server 3.1.1
GNU PG 1.2.1
GNU PG 1.2
GNU PG 1.0.7
GNU PG 1.0.6
GNU GNU Privacy Guard 1.2.1
+ OpenPKG OpenPKG 1.2
+ Redhat Linux 9.0 i386
 + Terra Soft Solutions Yellow Dog Linux 3.0
GNU GNU Privacy Guard 1.2
GNU GNU Privacy Guard 1.0.7
+ MandrakeSoft apcupsd 2006.0
 + MandrakeSoft Corporate Server 2.1 x86_64
 + MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Multi Network Firewall 2.0
+ Mandriva Linux Mandrake 9.0
+ Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2
+ OpenPKG OpenPKG 1.1
+ Redhat Enterprise Linux AS 2.1 IA64
 + Redhat Enterprise Linux AS 2.1
 + Redhat Enterprise Linux ES 2.1 IA64
 + Redhat Enterprise Linux ES 2.1
 + Redhat Enterprise Linux WS 2.1 IA64
 + Redhat Enterprise Linux WS 2.1
 + Redhat Linux 8.0 i386
 + Redhat Linux 7.3 i386
 + Redhat Linux 7.2 ia64
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.1 i386
 + Redhat Linux Advanced Work Station 2.1
+ Sun Linux 5.0.5
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Server 6.5
+ Turbolinux Turbolinux Server 6.1
+ Turbolinux Turbolinux Workstation 8.0
+ Turbolinux Turbolinux Workstation 7.0
+ Turbolinux Turbolinux Workstation 6.0
GNU GNU Privacy Guard 1.0.6
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
GNU GNU Privacy Guard 1.0.5
- Caldera OpenLinux 2.4
- Caldera OpenLinux 2.3
- Caldera OpenLinux eBuilder 3.0
- Debian Linux 2.2 sparc
 - Debian Linux 2.2 powerpc
 - Debian Linux 2.2 arm
 - Debian Linux 2.2 alpha
 - Debian Linux 2.2 68k
 - Debian Linux 2.2
- Immunix Immunix OS 7.0 beta
 - Immunix Immunix OS 7.0
- Immunix Immunix OS 6.2
- MandrakeSoft Corporate Server 1.0.1
- Mandriva Linux Mandrake 8.1
- Mandriva Linux Mandrake 8.0 ppc
 - Mandriva Linux Mandrake 8.0
- Mandriva Linux Mandrake 7.2
- Mandriva Linux Mandrake 7.1
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Redhat Linux 7.1 i386
 - Redhat Linux 7.1
- Redhat Linux 7.0 i386
 - Redhat Linux 7.0 alpha
 - Redhat Linux 7.0
- Redhat Linux 6.2 sparc
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.2 alpha
 - Redhat Linux 6.2
 - SuSE Linux 7.1
- SuSE Linux 7.0
- SuSE Linux 6.4
- SuSE Linux 6.3
- Trustix Secure Linux 1.2
- Trustix Secure Linux 1.1
GNU GNU Privacy Guard 1.0.4
- Turbolinux Turbolinux 6.0.5
- Turbolinux Turbolinux Server 6.5
- Turbolinux Turbolinux Workstation 6.1
GNU GNU Privacy Guard 1.0.3 b
GNU GNU Privacy Guard 1.0.3
GNU GNU Privacy Guard 1.0.2
GNU GNU Privacy Guard 1.0.1
GNU GNU Privacy Guard 1.0 .6
- MandrakeSoft Corporate Server 1.0.1
- Mandriva Linux Mandrake 8.1
- Mandriva Linux Mandrake 8.0 ppc
 - Mandriva Linux Mandrake 8.0
- Mandriva Linux Mandrake 7.2
- Mandriva Linux Mandrake 7.1
GNU GNU Privacy Guard 1.0
GNU finger 1.0.7
EnGarde Secure Professional 1.5
EnGarde Secure Professional 1.2
EnGarde Secure Professional 1.1
EnGarde Secure Community 2.0
EnGarde Secure Community 1.0.1
Not Vulnerable: GNU PG 1.2.2
GNU GNU Privacy Guard 1.2.2
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Workstation 3.1.1
+ Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1

Discussion

GNU Privacy Guard Insecure Trust Path To User ID Weakness

GNU Privacy Guard has been reported prone to weakness involving the validity of multiple user IDs. It has been reported that GNUPG does not sufficiently differentiate between the validity given to individual IDs on a public key that has multiple user IDs linked to it. This may result in the leakage of data presumed to be destined to a trusted user; other attacks may also be possible.

Exploit / POC

GNU Privacy Guard Insecure Trust Path To User ID Weakness

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

GNU Privacy Guard Insecure Trust Path To User ID Weakness

Solution:
Sun have released a security update to address this issue in the RAQ XTR. Please see references section for further details. A fix is linked below.

Sun has released updates for Sun Linux 5.0.5.

Yellow Dog Linux has released an advisory (YDU-20030602-5) and fixes to address this issue. Users are recommended to run the 'apt-get' utility by issuing the following commands. Manual retrieval and installation of the fixes is described in the referenced advisory.

apt-get update
apt-get install gnupg

EnGarde Secure Linux has released an advisory (ESA-20030515-016), which contains details on how to obtain and apply fixes to address this issue. EnGarde recommends that all affected users apply fixes as soon as possible.

Red Hat has released advisory RHSA-2003:175-01 with fixes to address this issue. See referenced advisory for additional details.

Red Hat has also released a security advisory (RHSA-2003-176) to address this issue for Red Hat Enterprise Linux and Advanced Workstation. The appropriate fixes have also been made available and can be obtained through the Red Hat Network:

http://rhn.redhat.com/

SCO has released an advisory (CSSA-2003-034.0) that includes updates for this issue.

The vendor has released an upgrade to address this issue, users are advised to upgrade as soon as possible:


Sun Cobalt RaQ XTR

GNU GNU Privacy Guard 1.0

GNU GNU Privacy Guard 1.0 .6

GNU GNU Privacy Guard 1.0.1

GNU GNU Privacy Guard 1.0.2

GNU GNU Privacy Guard 1.0.3 b

GNU GNU Privacy Guard 1.0.3

GNU GNU Privacy Guard 1.0.4

GNU GNU Privacy Guard 1.0.5

GNU GNU Privacy Guard 1.0.6

GNU finger 1.0.7

GNU GNU Privacy Guard 1.0.7

GNU GNU Privacy Guard 1.2

GNU GNU Privacy Guard 1.2.1

SCO OpenLinux Server 3.1.1

SCO OpenLinux Workstation 3.1.1

References

GNU Privacy Guard Insecure Trust Path To User ID Weakness

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report