CVEvulnerability

CVE-2001-0072

5.0 MEDIUM Published 2001-02-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-02-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.

Affected configurations

• gnu privacy guard 1.0 • gnu privacy guard 1.0.1 • gnu privacy guard 1.0.2 • gnu privacy guard 1.0.3 • gnu privacy guard 1.0.3b

References