CVE-2001-0071

5 documents5 sources
Severity
2.1LOW
EPSS
0.1%
top 66.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Privacy Guard
Timeline
PublishedFeb 12
Latest updateApr 30

Description

gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDgnu/privacy_guard5 versions+4

Patches

Patch: www.redhat.com ↗Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r7jj-pm2f-3h96: gpg (aka GnuPG) 1↗2022-04-30
▶
CVEList
CVE-2001-0071: gpg (aka GnuPG) 1↗2001-05-07
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2000-12-19
▶

💬Community

1
Bugzilla
CVE-2001-0071 security flaw↗2018-08-16
▶
CVE-2001-0071 (LOW CVSS 2.1) | gpg (aka GnuPG) 1.0.4 and other ver | cvebase.io