CVE-2001-0522 Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted...
HighCVSS 7.5
EPSS 13.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU privacy guard | = 7.1 | No fix listed |
| GNU privacy guard | = 7.2 | No fix listed |
| GNU privacy guard | = 8.0 | No fix listed |
References
- CLA-2001:399 vendor-advisory
- IMNX-2001-70-023-01 vendor-advisory
- 20010601 The GnuPG format string bug (was: TSLSA-2001-0009 - GnuPG) mailing-list
- CSSA-2001-020.0 vendor-advisory
- DSA-061 vendor-advisory
- www.gnupg.org
- VU#403051 third-party-advisory us-government-resource
- MDKSA-2001:053 patch vendor-advisory
- SuSE-SA:2001:020 vendor-advisory
- 1845 vdb-entry
- RHSA-2001:073 vendor-advisory
- 2797 vdb-entry
- TLSA2001028 vendor-advisory
- gnupg-tty-format-string(6642) vdb-entry