CVE-2001-0381 The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message....
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp openpgp | All versions | No fix listed |
References
- 20010319 Have they found a serious PGP vulnerability?! mailing-list vendor-advisory
- 20010320 Yes, they have found a serious PGP vulnerability...sort of mailing-list vendor-advisory
- 20010322 Re: Yes, they have found a serious PGP vulnerability...sort of mailing-list vendor-advisory
- 11966 vdb-entry
- RHSA-2001:063 vendor-advisory
- 2673 vdb-entry
- openpgp-private-key-disclosure(6558) vdb-entry