Unscored severity · published Jun 27, 2001
CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openpgp · Pgp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0381
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0381
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html
www.osvdb.org
http://www.osvdb.org/11966
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2001-063.html