CVE-2001-0522: gnu privacy_guard

EPSS trend

Probability

13.73%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.73% on 18-09-2026

18-09-202618-10-2026

EPSS score

13.73%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotemultipleVerified
GNU Privacy Guard 1.0.x - Format String
Maturity: weaponized

References

14 links

online.securityfocus.com/archive/1/188218Mailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/6642VDB EntryX Refsource XF
www.kb.cert.org/vuls/id/403051Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/2797VDB EntryX Refsource BID
www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txtVendor AdvisoryX Refsource CALDERA
www.redhat.com/support/errata/RHSA-2001-073.htmlVendor AdvisoryX Refsource REDHAT
www.gnupg.org/whatsnew.htmlX Refsource CONFIRM
www.debian.org/security/2001/dsa-061Vendor AdvisoryX Refsource DEBIAN
www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.htmlVendor AdvisoryX Refsource TURBO
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399Vendor AdvisoryX Refsource CONECTIVA

Show all 14 references

www.osvdb.org/1845VDB EntryX Refsource OSVDB
www.novell.com/linux/security/advisories/2001_020_gpg_txt.htmlVendor AdvisoryX Refsource SUSE
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01Vendor AdvisoryX Refsource IMMUNIX
www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3Vendor AdvisoryX Refsource MANDRAKEPatch

Related vulnerabilities

CVE-2003-0255gnuprivacy_guard6.56%23y ago07-05-2003 04:00The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.CVE-2003-0971debiangnupg+33.64%22y ago02-12-2003 05:00GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.CVE-2003-0978gnuprivacy_guard2.76%22y ago10-12-2003 05:00Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.CVE-2001-0071gnuprivacy_guard0.40%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.CVE-2001-0072gnuprivacy_guard1.97%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.CVE-2000-0974gnuprivacy_guard3.04%25y ago22-01-2001 05:00GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.

All vulnerabilities inprivacy_guard

CVE-2001-0522: gnu privacy_guard

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References