CVE-2005-0366

Publication date 2 May 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
gnupg 7.04 feisty
Fixed 1.2.5-4
6.10 edgy
Fixed 1.4.3-2ubuntu3.3
6.06 LTS dapper
Fixed 1.4.2.2-1ubuntu2.5

References

Related Ubuntu Security Notices (USN)

    • USN-170-1
    • gnupg vulnerability
    • 20 August 2005

Other references