Login Request a demo
Unscored severity · published Dec 31, 2002
CVE-2002-1977
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PG
Pgp · Pgp
7.0.4; 7.1 · source: NVD
Affected product
PG
Pgp
Pgp
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1977
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1977
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html
Patch
http://www.iss.net/security_center/static/9690.php
www.securityfocus.com
http://www.securityfocus.com/bid/5318
More from Pgp
–
CVE-2001-1016
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used…
–
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the…
–
CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file
–
CVE-2000-0678
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can…
–
CVE-2000-0445
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys