Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2001-0072 | First vendor Publication | 2001-02-12 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0072 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 5 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-01-17 | Name : Debian Security Advisory DSA 010-1 (gnupg) File : nvt/deb_010_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 1702 | GnuPG Private Key Silent Import GnuPG contains a flaw that may allow a malicious user to compromise the web of trust. The issue is triggered when the user retrieves keys from a public keyserver. GnuPG will import private keys as well as public ones, and will not warn the user about the import of private keys. An attacker can upload a private key to the keyserver as well as a public one, with malicious intent. Since private keys are implicitly trusted, it is possible that the flaw may allow a change in the trust relationships of the web of trust, resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2012-09-06 | Name : The remote Mandrake Linux host is missing a security update. File : mandrake_MDKSA-2000-087.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:24:37 |
|
| 2024-11-28 12:04:19 |
|
| 2021-05-04 12:01:16 |
|
| 2021-04-22 01:01:28 |
|
| 2020-05-23 00:14:32 |
|
| 2018-08-14 12:01:31 |
|
| 2017-10-10 09:23:19 |
|
| 2016-06-28 14:54:48 |
|
| 2014-02-17 10:23:32 |
|
| 2013-05-11 12:02:54 |
|
