gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 01:58
Type | Values Removed | Values Added |
---|---|---|
Summary | gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify". |
Information
Published : 2006-02-15 22:06
Updated : 2024-02-28 10:42
NVD link : CVE-2006-0455
Mitre link : CVE-2006-0455
CVE.ORG link : CVE-2006-0455
JSON object : View
Products Affected
gnu
- privacy_guard
CWE