Unscored severity · published Feb 23, 2006
CVE-2006-0803
The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Suse Linux · Novell
10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0803
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_09_gpg.html
www.novell.com
http://www.novell.com/linux/security/advisories/2006_13_gpg.html
www.securityfocus.com
http://www.securityfocus.com/bid/16889
More from Suse Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2007-1285
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays,…
–
CVE-2015-2567
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security :…
–
CVE-2015-2566
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML