Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which     prevents Evolution from visually distinguishing between signed and unsigned portions of OpenPGP messages     with multiple components, which allows remote attackers to forge the contents of a message without     detection. (CVE-2007-1266)

Note that Nessus relies on the presence of the package as reported by the vendor.

Gerardo Richarte from Core Security Technologies discovered that when gnupg is used without --status-fd, there is no way to distinguish initial unsigned messages from a following signed message. An attacker could inject an unsigned message, which could fool the user into thinking the message was entirely signed by the original sender.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GnuPG prior to 1.4.7 and GPGME prior to 1.1.4, when run from the command line, did not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components. This could allow a remote attacker to forge the contents of an email message without detection.

GnuPG 1.4.7 is being provided with this update and GPGME has been patched on Mandriva 2007.0 to provide better visual notification on these types of forgeries.

ID	Name	Product	Family	Severity
232307	Linux Distros Unpatched Vulnerability : CVE-2007-1266	Nessus	Misc.	high
28026	Ubuntu 5.10 / 6.06 LTS / 6.10 : gnupg vulnerability (USN-432-1)	Nessus	Ubuntu Local Security Checks	high
24809	Mandrake Linux Security Advisory : gnupg (MDKSA-2007:059)	Nessus	Mandriva Local Security Checks	high

Detections

Analytics

CVE-2007-1266

high

Tenable Plugins

high

high

high