CVE-2006-0049

Name of the Vulnerable Software and Affected Versions: GnuPG versions prior to 1.4.2.2

Description: The issue concerns the verification of non-detached signatures. Attackers can inject unsigned data via a data packet not associated with a control packet. This causes the check for concatenated signatures to incorrectly report the signature as valid.

Recommendations: For versions prior to 1.4.2.2, update to version 1.4.2.2 or later to resolve the issue.