cve/2018/CVE-2018-12020.md

CVE-2018-12020

Description

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

POC

Reference

• http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html
• http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html
• https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
• https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/giterlizzi/secdb-feeds
• https://github.com/hannob/pgpbugs
• https://github.com/lnick2023/nicenice
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/xbl3/awesome-cve-poc_qazbnm456