OSVDB ID: 27664

Title: GnuPG parse_comment Function Crafted Message Overflow DoS

Info

Disclosure

Jul 21, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Bugtraq ID: 19110
CVE ID: 2006-3746 (see also: NVD)
Secunia Advisory ID: 21297 21300 21306 21326 21329 21333 21346 21351 21378 21467 21522 21524 21598
SCIP VulDB ID: 2421
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P.asc http://lists.suse.com/archive/suse-security-announce/2006-Aug/0006.html
http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm
http://www.gentoo.org/security/en/glsa/glsa-200608-08.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:141
http://www.trustix.org/errata/2006/0044/
http://www.ubuntu.com/usn/usn-332-1
Mail List Post: http://archives.neohapsis.com/archives/dailydave/2006-q3/0079.html
Other Advisory URL: http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.445471
http://www.us.debian.org/security/2006/dsa-1140
http://www.us.debian.org/security/2006/dsa-1141
https://issues.rpath.com/browse/RPL-560
Vendor Specific News/Changelog Entry: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200502
RedHat RHSA: RHSA-2006:0615

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/27664