CVE-2001-0072
published 2001-02-12CVE-2001-0072: gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which…
PriorityP415medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.97%
78.1th percentile
gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7774-m57j-3qmq: gpg (aka GnuPG) 1
ghsa_unreviewed·2022-04-30
CVE-2001-0072 [MEDIUM] GHSA-7774-m57j-3qmq: gpg (aka GnuPG) 1
gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
Red Hat
security flaw
vendor_redhat·2000-12-19·CVSS 5.0
CVE-2001-0072 [MEDIUM] security flaw
security flaw
gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368http://www.debian.org/security/2000/20001225bhttp://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3http://www.osvdb.org/1702http://www.redhat.com/support/errata/RHSA-2000-131.htmlhttp://www.securityfocus.com/archive/1/152197http://www.securityfocus.com/bid/2153https://exchange.xforce.ibmcloud.com/vulnerabilities/5803http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368http://www.debian.org/security/2000/20001225bhttp://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3http://www.osvdb.org/1702http://www.redhat.com/support/errata/RHSA-2000-131.htmlhttp://www.securityfocus.com/archive/1/152197http://www.securityfocus.com/bid/2153https://exchange.xforce.ibmcloud.com/vulnerabilities/5803
2001-02-12
Published