CVE-2000-0678 PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp | = 5.5.3i | No fix listed |
| pgp | = 6.5.1i | No fix listed |
| pgp | = 6.5.3i | No fix listed |
References
- CA-2000-18 third-party-advisory us-government-resource
- 4354 vdb-entry
- 1606 patch vdb-entry vendor-advisory