Beveiligingsadvies

CVE-2000-0678

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2000-10-13 04:00:00
Laatst bijgewerkt 2024-08-08 05:28:41
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.