CVE-2012-3466

Currently unrated

Key Information:

Vendor
Gnome
Status
Gnome-keyring
Vendor
CVE Published:
22 October 2012

Summary

GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.

References

http://www.openwall.com/lists/oss-security/2012/08/09/2
mailing-listx_refsource_MLIST
http://git.gnome.org/browse/gnome-keyring/commit/?id=5160...
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/08/09/1
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.