pgp pgp 7.0 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.

Pgp Pgp 7.0

2.1

CVSSv2

ASCII Armor parser in Windows PGP 7.0.3 and previous versions allows malicious users to create files in arbitrary locations via a malformed ASCII armored file.

Pgp Pgp Pgp Pgp 5

1 EDB exploit

2.1

CVSSv2

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked,...

Pgp Personal Privacy 7.0 Pgp Personal Privacy 7.0.3 Pgp Personal Privacy 7.0.4

10

CVSSv2

Network Associates PGP Keyserver 7.0 allows remote malicious users to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.

Pgp Keyserver 7.0 Pgp Keyserver 7.0.1

7.5

CVSSv2

Network Associates PGP Keyserver 7.0 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.

Pgp Keyserver 7.0

1 EDB exploit

3.3

CVSSv2

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or...

Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0

1 Github repository

4

CVSSv2

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior v...

Otrs Otrs

4

CVSSv2

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior v...

Otrs Otrs

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook