PT-2001-1502 · Pine+1 · Pgp4Pine+1

Published 2001-04-04 · Updated 2017-07-11 · CVE-2001-0273

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pgp4pine Pine/PGP interface version 1.75-6

Description The issue arises from the improper checking of public key expiration when obtaining keys via Gnu Privacy Guard (GnuPG), resulting in messages being sent in cleartext.

Recommendations For pgp4pine Pine/PGP interface version 1.75-6, consider updating the key management process to properly handle public key expiration checks to prevent messages from being sent in cleartext.

Exploit

Fix

Related Identifiers

CVE-2001-0273

Affected Products

Gnupg

Pgp4Pine

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0273 · Security Note
• http://securityfocus.com/bid/2405 · Note
• http://kb.cert.org/vuls/id/566640 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6135 · Note