VULNERABILITY INTELLIGENCE
CVE-2006-0049
CVSS score5 MEDIUM
EPSS probability2.43%
CISA KEVNot currently listed
Published2006-03-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.