Detections
Analytics
FreeBSD : gnupg -- memory corruption vulnerability (30394651-13e1-11dd-bab7-0016179b2dd5)
high Nessus Plugin ID 32061
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Secunia reports :A vulnerability has been reported in GnuPG, which can potentially be exploited to compromise a vulnerable system.
The vulnerability is caused due to an error when importing keys with duplicated IDs. This can be exploited to cause a memory corruption when importing keys via --refresh-keys or --import.
Successful exploitation potentially allows execution of arbitrary code, but has not been proven yet.
Solution
Update the affected packages.See Also
http://ocert.org/advisories/ocert-2008-1.html
Plugin Details
Severity: High
ID: 32061
File Name: freebsd_pkg_3039465113e111ddbab70016179b2dd5.nasl
Version: 1.18
Type: local
Family: FreeBSD Local Security Checks
Published: 4/28/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:gnupg, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Ease: No known exploits are available
Patch Publication Date: 4/26/2008
Vulnerability Publication Date: 3/19/2008
Reference Information
CVE: CVE-2008-1530
BID: 28487