PT-2000-1386 · Pgp · Pgp

Published 2000-05-24 · Updated 2008-09-10 · CVE-2000-0445

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PGP versions 5.x

Description The issue is related to the pgpk command in PGP on Unix systems, which uses an insufficiently random data source for non-interactive key pair generation. This may result in the production of predictable keys.

Recommendations For PGP version 5.x, consider using an alternative method for key pair generation that utilizes a sufficiently random data source to minimize the risk of predictable keys.

Fix

Related Identifiers

CVE-2000-0445

Affected Products

Pgp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0445 · Security Note
• http://osvdb.org/1355 · Note
• http://cert.org/advisories/CA-2000-09.html · Note
• http://securityfocus.com/bid/1251 · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0273.html · Note