CVE-2001-0435: Medium severity PGP PGP vulnerability
Published May 24, 2001
·Updated
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.
Affected Software
1 affected component
PGP PGP=7.0
Event History
May 24, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0435?
CVE-2001-0435 is classified as a high-severity vulnerability due to the potential compromise of cryptographic keys.
2
How do I fix CVE-2001-0435?
To mitigate CVE-2001-0435, avoid using the 'Cache passphrase while logged on' option in PGP 7.0.
3
Who is affected by CVE-2001-0435?
Users of PGP 7.0 that utilize the split key mechanism are affected by CVE-2001-0435.
4
What kind of attack can exploit CVE-2001-0435?
CVE-2001-0435 can be exploited through passphrase capturing by a malicious key share holder.
5
Is there a patch available for CVE-2001-0435?
There is no specific patch for CVE-2001-0435, but users should upgrade to newer versions of PGP for better security.