CVE-2001-0522
published 2001-08-14CVE-2001-0522: Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the…
PriorityP337high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
13.73%
96.0th percentile
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
| gnu | privacy_guard | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2001-05-29·CVSS 7.5
CVE-2001-0522 [HIGH] security flaw
security flaw
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
GHSA
GHSA-59h7-cqx3-mx33: Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1
ghsa_unreviewed·2022-04-30
CVE-2001-0522 [HIGH] GHSA-59h7-cqx3-mx33: Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
No detection rules found.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01http://online.securityfocus.com/archive/1/188218http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txthttp://www.debian.org/security/2001/dsa-061http://www.gnupg.org/whatsnew.html#rn20010529http://www.kb.cert.org/vuls/id/403051http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.htmlhttp://www.osvdb.org/1845http://www.redhat.com/support/errata/RHSA-2001-073.htmlhttp://www.securityfocus.com/bid/2797http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6642http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01http://online.securityfocus.com/archive/1/188218http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txthttp://www.debian.org/security/2001/dsa-061http://www.gnupg.org/whatsnew.html#rn20010529http://www.kb.cert.org/vuls/id/403051http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.htmlhttp://www.osvdb.org/1845http://www.redhat.com/support/errata/RHSA-2001-073.htmlhttp://www.securityfocus.com/bid/2797http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6642
2001-08-14
Published