Login Request a demo
Unscored severity · published Aug 14, 2001
CVE-2001-0522
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is…
–
CVSS
13.7%
EPSS
No
On KEV
Description
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PG
Privacy Guard · Gnu
7.1; 7.2; 8.0 · source: NVD
Affected product
PG
Privacy Guard
Gnu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0522
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399
download.immunix.org
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01
online.securityfocus.com
http://online.securityfocus.com/archive/1/188218
www.calderasystems.com
http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt
www.debian.org
http://www.debian.org/security/2001/dsa-061
www.gnupg.org
http://www.gnupg.org/whatsnew.html#rn20010529
More from Privacy Guard
–
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP…
–
CVE-2006-0049
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a…
–
CVE-2006-0455
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a…
–
CVE-2003-0978
Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious…
–
CVE-2003-0971
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers…