PT-2001-1030 · Gnu · Gnupg

Published 2001-05-30 · Updated 2018-05-03 · CVE-2001-0522

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GnuPG versions 1.0.5 and earlier GnuPG version 1.0.6

Description The issue is related to a format string vulnerability in GnuPG, which can be exploited to gain privileges. This can be achieved via format strings in the original filename stored in an encrypted file. The exploitation of this vulnerability can lead to a breach of confidentiality, integrity, and availability of protected information and can be performed remotely.

Recommendations For GnuPG versions 1.0.5 and earlier, update to a version later than 1.0.5 to resolve the issue. For GnuPG version 1.0.6, consider disabling the use of encrypted files with potentially malicious filenames until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-07878

CVE-2001-0522

Affected Products

Gnupg

References · 18

• 🔥 https://exploit-db.com/exploits/20889 · Exploit
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01 · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07878 · Security Note
• http://novell.com/linux/security/advisories/2001_020_gpg_txt.html · Vendor Advisory
• http://calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-073.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0522 · Security Note
• http://turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399 · Vendor Advisory
• http://debian.org/security/2001/dsa-061 · Vendor Advisory
• http://securityfocus.com/bid/2797 · Note
• http://online.securityfocus.com/archive/1/188218 · Note
• http://osvdb.org/1845 · Note
• https://rhn.redhat.com/errata/RHSA-2001-073.html · Note