CVE-2002-1977: Low severity PGP PGP vulnerability
Published Dec 31, 2002
·Updated
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
Affected Software
2 affected components
PGP PGP=7.0.4
PGP PGP=7.1
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jun 28, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1977?
CVE-2002-1977 is considered a serious vulnerability due to its potential to allow unauthorized access to encrypted files.
2
How do I fix CVE-2002-1977?
To address CVE-2002-1977, you should upgrade to a newer version of PGP that resolves this passphrase caching issue.
3
What versions of software are affected by CVE-2002-1977?
CVE-2002-1977 affects PGP versions 7.0.4 and 7.1.
4
What type of vulnerability is CVE-2002-1977 categorized as?
CVE-2002-1977 is categorized as an authentication-related vulnerability.
5
How does CVE-2002-1977 affect users of PGP?
CVE-2002-1977 allows attackers to potentially open encrypted files without providing a passphrase, compromising data security for users.