Test ID:	1.3.6.1.4.1.25623.1.0.55111
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-170-1 (gnupg)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to gnupg announced via advisory USN-170-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: gnupg Serge Mister and Robert Zuccherato discovered a weakness of the symmetrical encryption algorithm of gnupg. When decrypting a message, gnupg uses a feature called quick scan this can quickly check whether the key that is used for decryption is (probably) the right one, so that wrong keys can be determined quickly without decrypting the whole message. A failure of the quick scan will be determined much faster than a successful one. Mister/Zuccherato demonstrated that this timing difference can be exploited to an attack which allows an attacker to decrypt parts of an encrypted message if an oracle is available, i. e. an automatic system that receives random encrypted messages from the attacker and answers whether it passes the quick scan check. However, since the attack requires a huge amount of oracle answers (about 32.000 for every 16 bytes of ciphertext), this attack is mostly theoretical. It does not have any impact on human operation of gnupg and is not believed to be exploitable in practice. The updated packages disable the quick check, which renders this timing attack impossible. Solution: The problem can be corrected by upgrading the affected package to version 1.2.4-4ubuntu2.1 (for Ubuntu 4.10), or 1.2.5-3ubuntu5.1 (for Ubuntu 5.04). In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-170-1 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 12529 Common Vulnerability Exposure (CVE) ID: CVE-2005-0366 http://www.securityfocus.com/bid/12529 CERT/CC vulnerability note: VU#303094 http://www.kb.cert.org/vuls/id/303094 http://www.gentoo.org/security/en/glsa/glsa-200503-29.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:057 http://eprint.iacr.org/2005/033 http://eprint.iacr.org/2005/033.pdf http://www.osvdb.org/13775 http://securitytracker.com/id?1013166 SuSE Security Announcement: SUSE-SR:2005:007 (Google Search) http://www.novell.com/linux/security/advisories/2005_07_sr.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.