Unrated severityNVD Advisory· Published Oct 18, 2005· Updated Jun 16, 2026

CVE-2005-3256

Description

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enigmail/Enigmail2 versions
cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*range: <=0.92.0
- (no CPE)range: <0.92.1

Patches

Vulnerability mechanics

References

www.kb.cert.org/vuls/id/805121nvdUS Government Resource
www.cert.dfn.de/infoserv/dsb/dsb-2005-01.htmlnvd
www.debian.org/security/2005/dsa-889nvd
www.mandriva.com/security/advisoriesnvd
www.novell.com/linux/security/advisories/2005_28_sr.htmlnvd
www.securityfocus.com/bid/15155nvd
www.vupen.com/english/advisories/2005/2158nvd
usn.ubuntu.com/211-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000