CVE-2006-0455

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg –verify".

Date published : 2006-02-15

http://www.securityfocus.com/bid/16663

http://www.securityfocus.com/archive/1/425289/100/0/threaded