CVE-2001-0072

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:privacy_guard:1.0.3b:*:*:*:*:*:*:*

History

No history.

Information

Published : 2001-02-12 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2001-0072

Mitre link : CVE-2001-0072

CVE.ORG link : CVE-2001-0072


JSON object : View

Products Affected

gnu

  • privacy_guard