PT-2000-1386 · Pgp · Pgp

Publicado 2000-05-24 · Atualizado 2008-09-10 · CVE-2000-0445

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PGP versions 5.x

Description The issue is related to the pgpk command in PGP on Unix systems, which uses an insufficiently random data source for non-interactive key pair generation. This may result in the production of predictable keys.

Recommendations For PGP version 5.x, consider using an alternative method for key pair generation that utilizes a sufficiently random data source to minimize the risk of predictable keys.

Correção

Identificadores relacionados

CVE-2000-0445

Produtos afetados

Pgp

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0445 · Nota de Segurança
• http://osvdb.org/1355 · Nota
• http://cert.org/advisories/CA-2000-09.html · Nota
• http://securityfocus.com/bid/1251 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0273.html · Nota