PT-2002-2698 · Network Associates · Pgp

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1977

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Network Associates PGP versions 7.0.4 through 7.1

Description The issue concerns the Passphrase Cache option, where the timeout value is not properly enforced, potentially allowing attackers to access encrypted files without providing a passphrase.

Recommendations For versions 7.0.4 through 7.1, consider disabling the Passphrase Cache option to minimize the risk of exploitation until a proper fix is available.

Correção

Identificadores relacionados

CVE-2002-1977

Produtos afetados

Pgp

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1977 · Nota de Segurança
• http://iss.net/security_center/static/9690.php · Correção
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html · Nota
• http://securityfocus.com/bid/5318 · Nota