exploits , vulnerabilities , articles , PGP ADK Insertion Vulnerability

Title	PGP ADK Insertion Vulnerability
Published	2000-08-24-12:00AM
Updated	2000-08-24-12:00AM
Class	Atomicity Error
CVE	CVE-2000-0678
Remote	Yes
Local	Yes
Credit	Discovered by Ralf Senderek <ralf@senderek.de> and publicized on his personal website in August of 2000.
Vulnerable	Network Associates PGP 6.5.3 i for Windows Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Network Associates PGP 6.5.1 i for Unix Network Associates PGP 5.5.3 i for Windows Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0
Not Vulnerable	GNU GNU Privacy Guard 1.0.7 Conectiva Linux 7.0 Conectiva Linux 8.0 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft gnupg-1.0.7-3.1mdk.i586.rpm MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Multi Network Firewall 2.0 OpenPKG OpenPKG 1.1 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux 7.1 i386 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.3 i386 RedHat Linux 8.0 i386 RedHat Linux Advanced Work Station 2.1 Sun Linux 5.0.5 Turbolinux Turbolinux Server 6.1 Turbolinux Turbolinux Server 6.5 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Workstation 6.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Workstation 8.0 GNU GNU Privacy Guard 1.0.6 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia-32 Debian Linux 3.0 ia-64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc GNU GNU Privacy Guard 1.0.5 - Caldera OpenLinux 2.3 - Caldera OpenLinux 2.4 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux ecommerce - Conectiva Linux graficas - Conectiva Linux 4.0 - Conectiva Linux 4.0 es - Conectiva Linux 4.1 - Conectiva Linux 4.2 - Conectiva Linux 5.0 - Conectiva Linux 5.1 - Conectiva Linux 6.0 - Debian Linux 2.2 - Debian Linux 2.2 68k - Debian Linux 2.2 alpha - Debian Linux 2.2 arm - Debian Linux 2.2 powerpc - Debian Linux 2.2 sparc - Immunix Immunix OS 6.2 - Immunix Immunix OS 7.0 - Immunix Immunix OS 7.0 beta - MandrakeSoft Corporate Server 1.0.1 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.2 - MandrakeSoft Linux Mandrake 8.0 - MandrakeSoft Linux Mandrake 8.0 ppc - MandrakeSoft Linux Mandrake 8.1 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - RedHat Linux 6.2 - RedHat Linux 6.2 alpha - RedHat Linux 6.2 i386 - RedHat Linux 6.2 sparc - RedHat Linux 7.0 - RedHat Linux 7.0 alpha - RedHat Linux 7.0 i386 - RedHat Linux 7.1 - RedHat Linux 7.1 i386 - S.u.S.E. Linux 6.3 - S.u.S.E. Linux 6.4 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 7.1 - Trustix Secure Linux 1.1 - Trustix Secure Linux 1.2 GNU GNU Privacy Guard 1.0.4 - Turbolinux Turbolinux 6.0.5 - Turbolinux Turbolinux Server 6.5 - Turbolinux Turbolinux Workstation 6.1 GNU GNU Privacy Guard 1.0.3 b GNU GNU Privacy Guard 1.0.3 GNU GNU Privacy Guard 1.0.2 GNU GNU Privacy Guard 1.0.1 GNU GNU Privacy Guard 1.0 .6 - MandrakeSoft Corporate Server 1.0.1 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.2 - MandrakeSoft Linux Mandrake 8.0 - MandrakeSoft Linux Mandrake 8.0 ppc - MandrakeSoft Linux Mandrake 8.1 GNU GNU Privacy Guard 1.0
Code	Currently SecurityDot is not aware of any exploits for this vulnerability. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability