1535 matches found
CVE-1999-1270
KMail in KDE 1.0 exposes a PGP passphrase as a command-line argument to other programs. This allows local users to view the passphrase via process listing (e.g., ps) and potentially compromise the PGP keys of other users. Affected component: KMail (KDE 1.0); root cause: passphrase passed as comma...
CVE-1999-1270: Undefined Security Weakness
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps...
Проблемы с отображением недействительных ключей в PGP
Если в ключ с подписаным USERID добавить второй USERID он будет отображаться как подписаный...
PGPsdk Key Validity Vulnerability
http://www.pgp.com/support/product-advisories/pgpsdk.asp A vulnerability in PGP's display of key validity has been discovered that could allow an attacker to fool users into thinking that a valid signature was created by what is actually an invalid user ID. If the attacker can obtain a signature ...
CVE-2001-1016
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trust...
Keys generated with PGP5i batch mode do not contain sufficient randomness on systems that use /dev/random
Overview Under certain circumstances, PGP v5.0 generates keys that are not sufficiently random, which may allow an attacker to predict keys and, hence, recover information encrypted with that key. Description Generating Randomness in PGP Keys In order to generate cryptographically secure keys, PG...
Network Associates PGP Keyserver contains multiple vulnerabilities in LDAP handling code
Overview The Network Associates PGP Keyserver contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this...
CVE-2001-1320
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via exceptional BER encodings possibly buffer overflows, as demonstrated by the PROTOS LDAPv3 test suite...
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
This module exploits a stack buffer overflow in the LDAP service that is part of the NAI PGP Enterprise product suite. This module was tested against PGP KeyServer v7.0. Due to space restrictions, egghunter is used to find our payload - therefore you may wish to adjust WfsDelay. Module Options ms...
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key...
CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...
CVE-2001-0381
The CVE-2001-0381 entry describes a vulnerability in the OpenPGP/PGP standard where an attacker can determine the private signature key through a cryptanalytic attack that involves modifying the encrypted private key file and then signing a single message. The available documents identify the aff...
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0435
The CVE-2001-0435 entry concerns the split key mechanism in PGP 7.0 . The root issue is that a key share holder can obtain access to the entire key by enabling the “Cache passphrase while logged on” option and then capturing the passphrases of other share holders as they authenticate. Documents s...
CVE-2001-0381: Undefined Security Weakness
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key...
CVE-2001-0435: Undefined Security Weakness
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0273
pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...
@stake Security Advisory: Windows PGP (Pretty Good Privacy) ASCII Armor Parser Vulnerability (A040901-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: Windows PGP Pretty Good Privacy ASCII Armor Parser Vulnerability Release Date: 04/09/2001 Application: PGP Pretty good privacy Version 5 to 7.0.3 latest Platform: Windows 95, 9...