CVE-2006-3746

Properties

Published:
27.07.2006
Updated:
21.08.2010
Patch available:
Severity:
Medium
CVSS vector:
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Product:
gnupg: gnupg

Vulnerability description

Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.

References:

MISC: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200502
BID: http://www.securityfocus.com/bid/19110
REDHAT: http://www.redhat.com/support/errata/RHSA-2006-0615.html
MLIST: http://www.gossamer-threads.com/lists/gnupg/devel/37623
OVAL: http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11347
MLIST: http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html
XF: http://xforce.iss.net/xforce/xfdb/28220
UBUNTU: http://www.ubuntu.com/usn/usn-332-1
BUGTRAQ: http://www.securityfocus.com/archive/1/archive/1/442621/100/100/threaded
BUGTRAQ: http://www.securityfocus.com/archive/1/archive/1/442012/100/0/threaded
OSVDB: http://www.osvdb.org/27664
SUSE: http://www.novell.com/linux/security/advisories/2006_20_sr.html
MANDRIVA: http://www.mandriva.com/security/advisories?name=MDKSA-2006:141
VUPEN: http://www.frsirt.com/english/advisories/2006/3123
DEBIAN: http://www.debian.org/security/2006/dsa-1141
DEBIAN: http://www.debian.org/security/2006/dsa-1140
CONFIRM: http://support.avaya.com/elmodocs2/security/ASA-2006-164.htm
SECTRACK: http://securitytracker.com/id?1016622
GENTOO: http://security.gentoo.org/glsa/glsa-200608-08.xml
SECUNIA: http://secunia.com/advisories/21598
SECUNIA: http://secunia.com/advisories/21524
SECUNIA: http://secunia.com/advisories/21522
SECUNIA: http://secunia.com/advisories/21467
SECUNIA: http://secunia.com/advisories/21378
SECUNIA: http://secunia.com/advisories/21351
SECUNIA: http://secunia.com/advisories/21346
SECUNIA: http://secunia.com/advisories/21333
SECUNIA: http://secunia.com/advisories/21329
SECUNIA: http://secunia.com/advisories/21326
SECUNIA: http://secunia.com/advisories/21306
SECUNIA: http://secunia.com/advisories/21300
SECUNIA: http://secunia.com/advisories/21297
TRUSTIX: http://lwn.net/Alerts/194228/
MISC: http://issues.rpath.com/browse/RPL-560
MISC: http://bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204;msg=15;att=1
SGI: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P