CVE-2006-6235

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

• ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc
• http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html
• http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html
• http://secunia.com/advisories/23245Patch, Vendor Advisory
• http://secunia.com/advisories/23250Patch, Vendor Advisory
• http://secunia.com/advisories/23255Patch, Vendor Advisory
• http://secunia.com/advisories/23259
• http://secunia.com/advisories/23269Patch, Vendor Advisory
• http://secunia.com/advisories/23284
• http://secunia.com/advisories/23290
• http://secunia.com/advisories/23299
• http://secunia.com/advisories/23303
• http://secunia.com/advisories/23329
• http://secunia.com/advisories/23335
• http://secunia.com/advisories/23513
• http://secunia.com/advisories/24047
• http://security.gentoo.org/glsa/glsa-200612-03.xml
• http://securitytracker.com/id?1017349
• http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm
• http://www.debian.org/security/2006/dsa-1231
• http://www.kb.cert.org/vuls/id/427009US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:228
• http://www.novell.com/linux/security/advisories/2006_28_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html
• http://www.redhat.com/support/errata/RHSA-2006-0754.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/453664/100/0/threaded
• http://www.securityfocus.com/archive/1/453723/100/0/threaded
• http://www.securityfocus.com/bid/21462Vendor Advisory
• http://www.trustix.org/errata/2006/0070
• http://www.ubuntu.com/usn/usn-393-1Patch
• http://www.ubuntu.com/usn/usn-393-2
• http://www.vupen.com/english/advisories/2006/4881
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30711
• https://issues.rpath.com/browse/RPL-835
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245
• ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc
• http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html
• http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html
• http://secunia.com/advisories/23245Patch, Vendor Advisory
• http://secunia.com/advisories/23250Patch, Vendor Advisory
• http://secunia.com/advisories/23255Patch, Vendor Advisory
• http://secunia.com/advisories/23259
• http://secunia.com/advisories/23269Patch, Vendor Advisory
• http://secunia.com/advisories/23284
• http://secunia.com/advisories/23290
• http://secunia.com/advisories/23299
• http://secunia.com/advisories/23303
• http://secunia.com/advisories/23329
• http://secunia.com/advisories/23335
• http://secunia.com/advisories/23513
• http://secunia.com/advisories/24047
• http://security.gentoo.org/glsa/glsa-200612-03.xml
• http://securitytracker.com/id?1017349
• http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm
• http://www.debian.org/security/2006/dsa-1231
• http://www.kb.cert.org/vuls/id/427009US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:228
• http://www.novell.com/linux/security/advisories/2006_28_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html
• http://www.redhat.com/support/errata/RHSA-2006-0754.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/453664/100/0/threaded
• http://www.securityfocus.com/archive/1/453723/100/0/threaded
• http://www.securityfocus.com/bid/21462Vendor Advisory
• http://www.trustix.org/errata/2006/0070
• http://www.ubuntu.com/usn/usn-393-1Patch
• http://www.ubuntu.com/usn/usn-393-2
• http://www.vupen.com/english/advisories/2006/4881
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30711
• https://issues.rpath.com/browse/RPL-835
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245

Published

Dec 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6229Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.…
• CVE-2006-6230SQL injection vulnerability in vuBB 0.2.1 and earlier allows…
• CVE-2006-6231vuBB 0.2.1 and earlier allows remote attackers to obtain sen…
• CVE-2006-6232PHP remote file inclusion vulnerability in admin/index.php i…
• CVE-2006-6233SQL injection vulnerability in the Downloads module for unkn…
• CVE-2006-6234Multiple SQL injection vulnerabilities in the Content module…
• CVE-2006-6236Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows…
• CVE-2006-6237SQL injection vulnerability in the decode_cookie function in…
• CVE-2006-6238The AutoFill feature in Apple Safari 2.0.4 does not properly…
• CVE-2006-6239webadmin in MailEnable NetWebAdmin Professional 2.32 and Ent…
• CVE-2006-6240Directory traversal vulnerability in Sorin Chitu Telnet-FTP …
• CVE-2006-6241Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticate…