CVE-2001-1252: Critical severity PGP Keyserver vulnerability

Published Sep 28, 2001

Updated

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multiconfig and (4) directory.

Affected Software

2 affected components

PGP Keyserver=7.0

PGP Keyserver=7.0.1

Remediation

Patch Available

http://www.iss.net/security_center/static/7203.php

Event History

Sep 28, 2001

CVE Published

04:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1252?

CVE-2001-1252 has a medium severity level as it allows unauthorized access to sensitive administrative functionalities.

How do I fix CVE-2001-1252?

To fix CVE-2001-1252, ensure that access to the cgi-bin directory is restricted and implement proper authentication measures.

What software is affected by CVE-2001-1252?

CVE-2001-1252 affects PGP Keyserver versions 7.0 and 7.0.1.

Can CVE-2001-1252 be exploited remotely?

Yes, CVE-2001-1252 can be exploited remotely by attackers without authentication.

What are the potential impacts of CVE-2001-1252?

The potential impacts of CVE-2001-1252 include unauthorized access to the administrative web interface, potentially compromising the keyserver's operations.