Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2013-4351
Description:GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.
Test IDs: 1.3.6.1.4.1.25623.1.0.123542   1.3.6.1.4.1.25623.1.0.123541   1.3.6.1.4.1.25623.1.0.105555   1.3.6.1.4.1.25623.1.1.4.2013.1578.1   1.3.6.1.4.1.25623.1.1.4.2013.1577.1   1.3.6.1.4.1.25623.1.1.4.2013.1576.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-4351
Debian Security Information: DSA-2773 (Google Search)
http://www.debian.org/security/2013/dsa-2773
Debian Security Information: DSA-2774 (Google Search)
http://www.debian.org/security/2013/dsa-2774
http://www.openwall.com/lists/oss-security/2013/09/13/4
RedHat Security Advisories: RHSA-2013:1459
http://rhn.redhat.com/errata/RHSA-2013-1459.html
SuSE Security Announcement: openSUSE-SU-2013:1526 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html
SuSE Security Announcement: openSUSE-SU-2013:1532 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html
http://ubuntu.com/usn/usn-1987-1




© 1998-2021 E-Soft Inc. All rights reserved.