PT-2001-1307 · Gnupg · Gpg

Publicado 2001-02-12 · Atualizado 2017-10-10 · CVE-2001-0072

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: gpg (aka GnuPG) versions 1.0.4 and other versions

Description: The issue allows an attacker to potentially break the web of trust by importing both public and private keys from public key servers without notifying the user about the private keys.

Recommendations: For gpg (aka GnuPG) versions 1.0.4 and other versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0072

Produtos afetados

Gpg

Referências · 9

• http://securityfocus.com/archive/1/152197 · Nota
• http://debian.org/security/2000/20001225b · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0072 · Nota de Segurança
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368 · Aviso do Fabricante
• http://securityfocus.com/bid/2153 · Aviso do Fabricante
• http://osvdb.org/1702 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5803 · Nota
• http://linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2000-131.html · Aviso do Fabricante