OSVDB ID: 1845

Title: GnuPG tty_printf() Format String

Info

Disclosure
May 30, 2001

Discovery
Unknown

Dates

Exploit
May 29, 2001

Solution
Unknown

Description

 GnuPG contains a flaw that may allow a malicious user to execute arbitrary code in the context of a user decrypting a given file. The issue is triggered when the attacker sends the victim a GPG message with a crafted filename, exploiting a format string vulnerability in the tty_printf() function. It is possible that the flaw may allow execution of code in the context of the target user, resulting in a loss of integrity.

Classification

 Location: Local Access Required, Remote / Network Access, Local / Remote, Context Dependent
Attack Type: Cryptographic, Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

 Upgrade to version 1.0.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

GNU

GNU Privacy Guard

 0.9x
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5

References

Credit
  • Fish Stiqz - fishsynnergy.net - Synnergy Networks


Direct URL: http://osvdb.org/1845