| Name | CVE-2005-3256 |
| Description | The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-889-1 |
| Debian Bugs | 335731 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| enigmail | source | sarge | 2:0.91-4sarge2 | DSA-889-1 | ||
| enigmail | source | (unstable) | 2:0.93-1 | medium | 335731 |