CVE-2012-3582

Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session.

Score

CVSS 2.0 2.9 Low

Status

Modified - cve@mitre.org

Published

2012-09-04

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Pgp Universal Server (Symantec)

References

• http://www.securityfocus.com/bid/55246
• http://www.securitytracker.com/id?1027467
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=…