Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » GnuPG bug

GnuPG bug

by Nikola Strahija on March 14th, 2006 Gnu Privacy Guard suffers from a security flaw, which allows an attacker to embed a maliciously crafted code into a PGP signed message.


The open-source PGP encryption program, due to its vulnerability, allows the attacker to insert an already signed with additional code, appearing to be a part of the content.

-Someone who's able to intercept the message as it's transmitted could inject some data, and then the person who verifies the signature would be told it's a valid, unaltered message, said Thomas Kristensen of Secunia, adding that in such way the main purpose of the program is compromised.

The flaw affects all versions of GnuPG prior to 1.4.2.2, and users are advised to upgrade at once to that release.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »