CVE

Id
7795  
CVE No.
CVE-2003-0971  
Status
Candidate  
Description
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.  
Phase
Assigned (20031201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
46177 7795 CVE-2003-0971 BUGTRAQ:20031127 GnuPG"s ElGamal signing keys compromised  View
46178 7795 CVE-2003-0971 URL:http://marc.info/?l=bugtraq&m=106995769213221&w=2  View
46179 7795 CVE-2003-0971 CONFIRM:http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000276.html  View
46180 7795 CVE-2003-0971 CONFIRM:http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000277.html  View
46181 7795 CVE-2003-0971 MANDRAKE:MDKSA-2003:109  View
46182 7795 CVE-2003-0971 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:109  View
46183 7795 CVE-2003-0971 CONECTIVA:CLA-2003:798  View
46184 7795 CVE-2003-0971 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798  View
46185 7795 CVE-2003-0971 SGI:20040202-01-U  View
46186 7795 CVE-2003-0971 URL:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc  View
46187 7795 CVE-2003-0971 SUSE:SuSE-SA:2003:048  View
46188 7795 CVE-2003-0971 URL:http://www.novell.com/linux/security/advisories/2003_048_gpg.html  View
46189 7795 CVE-2003-0971 REDHAT:RHSA-2003:390  View
46190 7795 CVE-2003-0971 URL:http://www.redhat.com/support/errata/RHSA-2003-390.html  View
46191 7795 CVE-2003-0971 REDHAT:RHSA-2003:395  View
46192 7795 CVE-2003-0971 URL:http://www.redhat.com/support/errata/RHSA-2003-395.html  View
46193 7795 CVE-2003-0971 DEBIAN:DSA-429  View
46194 7795 CVE-2003-0971 URL:http://www.debian.org/security/2004/dsa-429  View
46195 7795 CVE-2003-0971 CERT-VN:VU#940388  View
46196 7795 CVE-2003-0971 URL:http://www.kb.cert.org/vuls/id/940388  View
46197 7795 CVE-2003-0971 BID:9115  View
46198 7795 CVE-2003-0971 URL:http://www.securityfocus.com/bid/9115  View
46199 7795 CVE-2003-0971 OVAL:oval:org.mitre.oval:def:10982  View
46200 7795 CVE-2003-0971 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10982  View
46201 7795 CVE-2003-0971 SECUNIA:10304  View
46202 7795 CVE-2003-0971 URL:http://secunia.com/advisories/10304  View
46203 7795 CVE-2003-0971 SECUNIA:10349  View
46204 7795 CVE-2003-0971 URL:http://secunia.com/advisories/10349  View
46205 7795 CVE-2003-0971 SECUNIA:10399  View
46206 7795 CVE-2003-0971 URL:http://secunia.com/advisories/10399  View
46207 7795 CVE-2003-0971 SECUNIA:10400  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63633 JVNDB-2003-000359 GNU screen におけるセミコロンを含むエスケープシーケンスの処理による整数オーバーフローの脆弱性 GNU screen には、特定の内部変数に負値が与えられた場合に、妥当性の確認が適切に行われていない不備のため、整数オーバーフローを発生する脆弱性が存在します。 CVE-2003-0972 7795 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000359.html  View