CVEvulnerability
CVE-2002-1977
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
Affected configurations
• pgp pgp 7.0.4
• pgp pgp 7.1
Related
Referenced by CWE · observed example (1)
- CWE-449 The UI Performs the Wrong Action weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9690.php Patch
- http://www.securityfocus.com/bid/5318 www.securityfocus.com
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9690.php Patch
- http://www.securityfocus.com/bid/5318 www.securityfocus.com