PT-2001-1502 · Pine+1 · Pgp4Pine+1

Publicado 2001-04-04 · Atualizado 2017-07-11 · CVE-2001-0273

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pgp4pine Pine/PGP interface version 1.75-6

Description The issue arises from the improper checking of public key expiration when obtaining keys via Gnu Privacy Guard (GnuPG), resulting in messages being sent in cleartext.

Recommendations For pgp4pine Pine/PGP interface version 1.75-6, consider updating the key management process to properly handle public key expiration checks to prevent messages from being sent in cleartext.

Exploit

Correção

Identificadores relacionados

CVE-2001-0273

Produtos afetados

Gnupg

Pgp4Pine

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0273 · Nota de Segurança
• http://securityfocus.com/bid/2405 · Nota
• http://kb.cert.org/vuls/id/566640 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6135 · Nota