CVE-2002-1977

CVE-2002-1977 affects Network Associates PGP 7.0.4 and 7.1. The issue is that the Passphrase Cache timeout is not applied as configured, potentially allowing local attackers to open encrypted files without a passphrase. This is a technical description based on Red Hat/NVD entries; no exploitation...

CVE-2002-1977

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase...

CVE-2002-1696

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted...

CVE-2002-1696

The CVE concerns Microsoft Outlook plug-in PGP 7.0, 7.0.3, and 7.0.4. When the user replies to an encrypted message with the option “Automatically decrypt/verify when opening messages” enabled and “Always use Secure Viewer when decrypting” disabled, a decrypted copy of the message is silently sav...

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may...

FreeBSD-SA-05:02.sendfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...

MDKSA-2005:057 - Updated gnupg packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gnupg Advisory ID: MDKSA-2005:057 Date: March 15th, 2005 Affected versions: 10.0, 10.1, 9.2, Corporate 3.0, Corporate Server 2.1 Problem Description: The OpenPGP protocol is vulnerable to a...

PGP Email Client Detection

Binary data 2609.prm...

CVE-2002-0850

The CVE-2002-0850 issue affects PGP Corporate Desktop 7.1.1 . A buffer overflow occurs when handling an encrypted document with a very long filename, which can be exploited to cause a crash or remote code execution when the file is decrypted. Exploitation scenarios described in the accompanying a...

CVE-2002-0850

Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted...

The Bat! memory corruption

Memory corruption on parsing multipart PGP messages...

The Bat! 2.01 memory corruption

Dear bugtraq, AGK agk at sandy.ru discovered The Bat! 2.01 to throw exception on few messages. It looks like The Bat! 2.01 in standard configuration with build-in PGP support has a bug with processing PGP signed messages protocol="application/pgp-signature" with multiple recursively included part...

CVE-2003-1524

PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition...

SquirrelMail shell characters command execution

Uncommented shell characters in parsing To: headers in PGP plugin...

CVE-2002-0900

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long search argument to the lookup capability...

CVE-2002-0788

CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...

CVE-2002-0685

Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message...

CVE-2002-0900

The CVE-2002-0900 entry concerns the pks PGP public key web server prior to 0.9.5. The vulnerability is a buffer overflow in the lookup capability that can be triggered by a long search argument, resulting in denial of service and potentially arbitrary code execution. Affected component: the PGP ...

CVE-2002-0788

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System EFS, creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain...

CVE-2002-0685

CVE-2002-0685 describes a heap-based buffer overflow in the message decoding function of the PGP Outlook Plug-in used by NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3. A remote attacker could trigger this via a large, malformed email message to modify the heap and ga...