CVE-2001-0435

Published May 24, 2001 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2001-0432 The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 4:21 AM
Reserved
May 24, 2001, 12:00 AM
Status
Modified
Published
Jul 2, 2001, 4:00 AM
Modified
Jun 16, 2026, 9:54 PM