5
CVE-2001-0072
- EPSS 1.97%
- Veröffentlicht 12.02.2001 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:53:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Logingpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Privacy Guard Version1.0
Gnu ≫ Privacy Guard Version1.0.1
Gnu ≫ Privacy Guard Version1.0.2
Gnu ≫ Privacy Guard Version1.0.3
Gnu ≫ Privacy Guard Version1.0.3b
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.97% | 0.778 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368
http://www.debian.org/security/2000/20001225b
http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3
http://www.redhat.com/support/errata/RHSA-2000-131.html
http://www.securityfocus.com/archive/1/152197
http://www.osvdb.org/1702
http://www.securityfocus.com/bid/2153
https://exchange.xforce.ibmcloud.com/vulnerabilities/5803