CVE-2006-0455

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does…

published February 15, 2006

CVSS
—
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01359 · 71.5th percentile
Published
2006-02-15T22:00Z
EPSS history
Timeline
  • 15 FEB 22:00Z
    gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does…
    cvelistv5