CVE-2002-1977 Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp | = 7.0.4 | No fix listed |
| pgp | = 7.1 | No fix listed |
References
- 20020725 PGP 7.04 Patch Modifies the Password Cache Setting mailing-list
- 20020725 RE: PGP 7.04 Patch Modifies the Password Cache Setting mailing-list
- pgp-passphrase-cache(9690) patch vdb-entry
- 5318 vdb-entry