2.1

CVE-2001-0071

gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
GnuPrivacy Guard Version1.0
GnuPrivacy Guard Version1.0.1
GnuPrivacy Guard Version1.0.2
GnuPrivacy Guard Version1.0.3
GnuPrivacy Guard Version1.0.3b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.315
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368
http://www.debian.org/security/2000/20001225b
http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3
http://www.osvdb.org/1699
http://www.redhat.com/support/errata/RHSA-2000-131.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/152197
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2141
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5802