CVE-2003-0971

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing…

published December 2, 2003

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03639 · 89.4th percentile
Published
2003-12-02T05:00Z
EPSS history
Timeline
  • 02 DEC 05:00Z
    GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing…
    cvelistv5