CVE-2001-0435

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-07-02

Last modified

2024-08-08

Affected products

• Pgp (Pgp)

References

• http://marc.info/?l=bugtraq&m=98691775527457&w=2