Vulnerability Details : CVE-2006-0803
The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used.
Exploit prediction scoring system (EPSS) score for CVE-2006-0803
Probability of exploitation activity in the next 30 days: 0.22%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 59 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-0803
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2006-0803
Products affected by CVE-2006-0803
- cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*