National Cyber-Alert System

Vulnerability Summary for CVE-2006-6235

Overview

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#427009

Name: VU#427009

Hyperlink:http://www.kb.cert.org/vuls/id/427009

External Source: XF

Name: gnupg-openpgp-code-execution(30711)

Type: Advisory; Patch Information

Hyperlink:http://xforce.iss.net/xforce/xfdb/30711

External Source: UBUNTU

Name: USN-393-1

Type: Patch Information

Hyperlink:http://www.ubuntu.com/usn/usn-393-1

External Source: VUPEN

Name: ADV-2006-4881

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2006/4881

External Source: SECUNIA

Name: 23269

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/23269

External Source: SECUNIA

Name: 23255

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/23255

External Source: SECUNIA

Name: 23250

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/23250

External Source: SECUNIA

Name: 23245

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/23245

External Source: BID

Name: 21462

Type: Advisory

Hyperlink:http://www.securityfocus.com/bid/21462

External Source: REDHAT

Name: RHSA-2006:0754

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0754.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-835

Hyperlink:https://issues.rpath.com/browse/RPL-835

External Source: UBUNTU

Name: USN-393-2

Hyperlink:http://www.ubuntu.com/usn/usn-393-2

External Source: TRUSTIX

Name: 2006-0070

Hyperlink:http://www.trustix.org/errata/2006/0070

External Source: BUGTRAQ

Name: 20061206 rPSA-2006-0227-1 gnupg

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/453723/100/0/threaded

External Source: BUGTRAQ

Name: 20061206 GnuPG: remotely controllable function pointer [CVE-2006-6235]

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/453664/100/0/threaded

External Source: OPENPKG

Name: OpenPKG-SA-2006.037

Hyperlink:http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html

External Source: SUSE

Name: SUSE-SR:2006:028

Hyperlink:http://www.novell.com/linux/security/advisories/2006_28_sr.html

External Source: MANDRIVA

Name: MDKSA-2006:228

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:228

External Source: DEBIAN

Name: DSA-1231

Hyperlink:http://www.debian.org/security/2006/dsa-1231

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm

External Source: SECTRACK

Name: 1017349

Hyperlink:http://securitytracker.com/id?1017349

External Source: GENTOO

Name: GLSA-200612-03

Hyperlink:http://security.gentoo.org/glsa/glsa-200612-03.xml

External Source: SECUNIA

Name: 24047

Hyperlink:http://secunia.com/advisories/24047

External Source: SECUNIA

Name: 23513

Hyperlink:http://secunia.com/advisories/23513

External Source: SECUNIA

Name: 23335

Hyperlink:http://secunia.com/advisories/23335

External Source: SECUNIA

Name: 23329

Hyperlink:http://secunia.com/advisories/23329

External Source: SECUNIA

Name: 23303

Hyperlink:http://secunia.com/advisories/23303

External Source: SECUNIA

Name: 23299

Hyperlink:http://secunia.com/advisories/23299

External Source: SECUNIA

Name: 23290

Hyperlink:http://secunia.com/advisories/23290

External Source: SECUNIA

Name: 23284

Hyperlink:http://secunia.com/advisories/23284

External Source: SECUNIA

Name: 23259

Hyperlink:http://secunia.com/advisories/23259

External Source: SUSE

Name: SUSE-SA:2006:075

Hyperlink:http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html

External Source: SGI

Name: 20061201-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc