PT-2002-2698 · Network Associates · Pgp

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1977

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Network Associates PGP versions 7.0.4 through 7.1

Description The issue concerns the Passphrase Cache option, where the timeout value is not properly enforced, potentially allowing attackers to access encrypted files without providing a passphrase.

Recommendations For versions 7.0.4 through 7.1, consider disabling the Passphrase Cache option to minimize the risk of exploitation until a proper fix is available.

Fix

Related Identifiers

CVE-2002-1977

Affected Products

Pgp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1977 · Security Note
• http://iss.net/security_center/static/9690.php · Patch
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html · Note
• http://securityfocus.com/bid/5318 · Note