GnuPG CVE-2001-0071 Local Signature Processing Vulnerability and Patches

Vulnerability Key Information CVE ID: CVE-2001-0071 GnuPG allows local users to compromise message detection by exploiting issues in signature handling. CVSS 1.0 Base Score: 2.5 - Access Vector: Local - Access Complexity: Low - Authentication: Not Required - Confidentiality Impact: None - Integrity Impact: Partial - Availability Impact: None Affected Products: - GNU Privacy Guard 1.0 - GNU Privacy Guard 1.0.1 - GNU Privacy Guard 1.0.2 - GNU Privacy Guard 1.0.3 Dependent Products: - RedHat Linux 6.2 - RedHat Linux 7 - RedHat Linux 7.1 - RedHat Linux 7.2 External Links: - BID-2141 - CVE-2001-0071 - MandrakeSoft Security Advisory MDKSA-2000:087 - BugTraq Mailing List, Wed Dec 20 2000 - 07:53:45 CST Mitigation Measures: - For Red Hat Linux 6.2 and 7.0: Upgrade to the latest version of GnuPG (1.0.4-8.6 or higher), as described in RHSA-2000:131-02. - For Linux Mandrake 7.0 and 7.1: Upgrade to the latest version of GnuPG (1.0.4-3.2 or higher), as described in MandrakeSoft Security Advisory MDKSA-2000:087 : gnupg. - For Linux-Mandrake 7.2: Upgrade to the latest version of GnuPG (1.0.4-3.1 or higher), as described in MandrakeSoft Security Advisory MDKSA-2000:087 : gnupg. - For Trustix Secure Linux 1.0, 1.1, and 1.2: Upgrade to the latest version of GnuPG (1.0.4-4tr or higher), as described in Trustix Security Advisory - gnupg, ftpd-BSD. - For Debian Linux 2.2 (potato): Upgrade to the latest version of gnupg (1.0.4-1.1 or higher), as described in Debian Security Advisory 20001225b. - For other distributions: Contact your vendor for upgrade or patch information.

Goal Reached Thanks to every supporter — we hit 100%!

GnuPG CVE-2001-0071 Local Signature Processing Vulnerability and Patches