Lucene search
MitreCVE-2001-0435HistoryJul 02, 2001 - 4:00 a.m.
CVE-2001-0435
2001-07-0204:00:00
mitre
web.nvd.nist.gov
29
cve-2001-0435
pgp 7.0
split key mechanism
passphrase cache
information security.
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
5.1%
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the “Cache passphrase while logged on” option and capturing the passphrases of other share holders as they authenticate.
Affected configurations
Node
pgppgpMatch7.0
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2001-0435