CVE-2005-0366
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.9%
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.
Produtos afetados
n/a · n/aReferências
http://eprint.iacr.org/2005/033http://eprint.iacr.org/2005/033.pdfhttp://securitytracker.com/id?1013166http://www.gentoo.org/security/en/glsa/glsa-200503-29.xmlhttp://www.kb.cert.org/vuls/id/303094http://www.mandriva.com/security/advisories?name=MDKSA-2005:057http://www.novell.com/linux/security/advisories/2005_07_sr.htmlhttp://www.osvdb.org/13775http://www.pgp.com/library/ctocorner/openpgp.htmlhttp://www.securityfocus.com/bid/12529