5
CVE-2003-0971
- EPSS 2.34%
- Published 15.12.2003 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Privacy Guard Version1.0.2
Gnu ≫ Privacy Guard Version1.0.3
Gnu ≫ Privacy Guard Version1.0.3b
Gnu ≫ Privacy Guard Version1.0.4
Gnu ≫ Privacy Guard Version1.0.5
Gnu ≫ Privacy Guard Version1.0.6
Gnu ≫ Privacy Guard Version1.0.7
Gnu ≫ Privacy Guard Version1.2
Gnu ≫ Privacy Guard Version1.2.1
Gnu ≫ Privacy Guard Version1.2.2
Gnu ≫ Privacy Guard Version1.2.2 Updaterc1
Gnu ≫ Privacy Guard Version1.2.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.34% | 0.842 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|