Test ID:	1.3.6.1.4.1.25623.1.0.53128
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 429-1 (gnupg)
Summary:	The remote host is missing an update to gnupg announced via advisory DSA 429-1.;; This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-429)' (OID: 1.3.6.1.4.1.25623.1.0.53137).
Description:	Summary: The remote host is missing an update to gnupg announced via advisory DSA 429-1. This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-429)' (OID: 1.3.6.1.4.1.25623.1.0.53137). Vulnerability Insight: Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. This update disables the use of this type of key. For the current stable distribution (woody) this problem has been fixed in version 1.0.6-4woody1. For the unstable distribution, this problem has been fixed in version 1.2.4-1. We recommend that you update your gnupg package. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0971 BugTraq ID: 9115 http://www.securityfocus.com/bid/9115 Bugtraq: 20031127 GnuPG's ElGamal signing keys compromised (Google Search) http://marc.info/?l=bugtraq&m=106995769213221&w=2 CERT/CC vulnerability note: VU#940388 http://www.kb.cert.org/vuls/id/940388 Conectiva Linux advisory: CLA-2003:798 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798 Debian Security Information: DSA-429 (Google Search) http://www.debian.org/security/2004/dsa-429 http://www.mandriva.com/security/advisories?name=MDKSA-2003:109 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10982 http://www.redhat.com/support/errata/RHSA-2003-390.html http://www.redhat.com/support/errata/RHSA-2003-395.html http://secunia.com/advisories/10304 http://secunia.com/advisories/10349 http://secunia.com/advisories/10399 http://secunia.com/advisories/10400 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc SuSE Security Announcement: SuSE-SA:2003:048 (Google Search) http://www.novell.com/linux/security/advisories/2003_048_gpg.html
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.