Home > Vulnerability Database > CVE-2006-6235

Mend.io Vulnerability Database

CVE-2006-6235

Date: December 7, 2006

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Language: C

Severity Score

9.8

Related Resources (38)

Url: http://www.securityfocus.com/archive/1/453723/100/0/threaded

Url: http://www.debian.org/security/2006/dsa-1231

Url: http://www.vupen.com/english/advisories/2006/4881

Url: http://www.securityfocus.com/bid/21462

Url: http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm

Url: http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html

Url: http://securitytracker.com/id?1017349

Url: http://secunia.com/advisories/23259

Url: http://secunia.com/advisories/23335

Url: http://security.gentoo.org/glsa/glsa-200612-03.xml

Url: http://secunia.com/advisories/23513

Url: https://issues.rpath.com/browse/RPL-835

Url: ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-6235

Url: http://secunia.com/advisories/23250

Url: http://secunia.com/advisories/23255

Url: http://secunia.com/advisories/23299

Url: http://secunia.com/advisories/24047

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-6235

Url: http://www.securityfocus.com/archive/1/453664/100/0/threaded

Url: http://secunia.com/advisories/23290

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245

Url: http://www.redhat.com/support/errata/RHSA-2006-0754.html

Url: http://www.ubuntu.com/usn/usn-393-1

Url: http://www.ubuntu.com/usn/usn-393-2

Url: http://www.trustix.org/errata/2006/0070

Url: http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html

Url: http://secunia.com/advisories/23303

Url: http://secunia.com/advisories/23269

Url: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html

Url: http://secunia.com/advisories/23329

Url: http://secunia.com/advisories/23284

Url: http://www.novell.com/linux/security/advisories/2006_28_sr.html

Url: http://www.kb.cert.org/vuls/id/427009

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/30711

Url: http://secunia.com/advisories/23245

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:228

Url: https://www.mend.io/vulnerability-database/CVE-2006-6235

Severity Score

9.8

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2006-6235

Date: December 7, 2006

Language: C

Severity Score

Related Resources (38)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?