CVE-2006-0803

N/A Unknown

Published: February 23, 2006 Modified: April 16, 2026

Description

The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.novell.com/linux/security/advisories/2006_09_gpg.html

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_13_gpg.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/16889

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_09_gpg.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_13_gpg.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16889

Source: af854a3a-2127-422b-91ae-364da2661108

6 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.2%

44th percentile

Exploitation Status

Not in CISA KEV

Affected Vendors

novell suse