CVE-2002-1284

Published: Nov 29, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read.

Affected (6)

Products: Kgpg: Kgpg

Kgpg

1 product

Kgpg

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Kgpg Kgpg	Version 0.6.1
Kgpg Kgpg	Version 0.6
Kgpg Kgpg	Version 0.7
Kgpg Kgpg	Version 0.8.1
Kgpg Kgpg	Version 0.8.2
Kgpg Kgpg	Version 0.8

References (8)

http://devel-home.kde.org/~kgpg/bug.html

Source: cve@mitre.org

Vendor Advisory

http://marc.info/?l=bugtraq&m=103702926611286&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/6152

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/10629

Source: cve@mitre.org

http://devel-home.kde.org/~kgpg/bug.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://marc.info/?l=bugtraq&m=103702926611286&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6152

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/10629

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.