CVE-2005-3256
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2005-3256
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2005-3256.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2005-3256
- Related
- Published
- 2005-10-18T21:02:00Z
- Modified
- 2025-04-03T01:03:51Z
- Summary
- [none]
- Details
-
The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.
- References
-
- http://www.debian.org/security/2005/dsa-889
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:226
- http://www.novell.com/linux/security/advisories/2005_28_sr.html
- http://www.vupen.com/english/advisories/2005/2158
- http://www.cert.dfn.de/infoserv/dsb/dsb-2005-01.html
- http://www.kb.cert.org/vuls/id/805121
- http://www.securityfocus.com/bid/15155
- https://usn.ubuntu.com/211-1/
- https://security-tracker.debian.org/tracker/CVE-2005-3256
Affected packages
Debian:11 / enigmail
Package
- Name
- enigmail
- Purl
- pkg:deb/debian/enigmail?arch=source