CVE-2001-0522

Published: Aug 14, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.

Affected (3)

Products: Gnu: Privacy Guard

Gnu

1 product

Privacy Guard

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gnu Privacy Guard	Version 7.1
Gnu Privacy Guard	Version 7.2
Gnu Privacy Guard	Version 8.0

References (28)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399

Source: cve@mitre.org

http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/188218

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt

Source: cve@mitre.org

http://www.debian.org/security/2001/dsa-061

Source: cve@mitre.org

http://www.gnupg.org/whatsnew.html#rn20010529

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/403051

Source: cve@mitre.org

US Government Resource

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3

Source: cve@mitre.org

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html

Source: cve@mitre.org

http://www.osvdb.org/1845

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2001-073.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/2797

Source: cve@mitre.org

http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/6642

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399