CVE-2003-0255: gnu privacy_guard

EPSS trend

Probability

6.56%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.56% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

16 links

www.turbolinux.com/security/TLSA-2003-34.txtVendor AdvisoryX Refsource TURBO
www.redhat.com/support/errata/RHSA-2003-175.htmlVendor AdvisoryX Refsource REDHATPatch
www.osvdb.org/4947VDB EntryX Refsource OSVDB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A135VDB EntrySignatureX Refsource OVAL
marc.info?l=bugtraq&m=105362224514081&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/7497VDB EntryX Refsource BID
marc.info?l=bugtraq&m=105311804129104&w=2Mailing ListX Refsource BUGTRAQ
www.linuxsecurity.com/advisories/gentoo_advisory-3266.htmlX Refsource MISC
www.mandriva.com/security/advisories?name=MDKSA-2003:061Vendor AdvisoryX Refsource MANDRAKE
exchange.xforce.ibmcloud.com/vulnerabilities/11930VDB EntryX Refsource XF

Show all 16 references

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694Vendor AdvisoryX Refsource CONECTIVA
www.redhat.com/support/errata/RHSA-2003-176.htmlVendor AdvisoryX Refsource REDHAT
www.linuxsecurity.com/advisories/engarde_advisory-3258.htmlVendor AdvisoryX Refsource ENGARDE
marc.info?l=bugtraq&m=105301357425157&w=2Vendor AdvisoryX Refsource ENGARDE
www.kb.cert.org/vuls/id/397604Third Party AdvisoryX Refsource CERT VNUS Government Resource
marc.info?l=bugtraq&m=105215110111174&w=2Mailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2003-0971debiangnupg+33.64%22y ago02-12-2003 05:00GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.CVE-2003-0978gnuprivacy_guard2.76%22y ago10-12-2003 05:00Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.CVE-2001-0071gnuprivacy_guard0.40%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.CVE-2001-0522gnuprivacy_guard13.73%24y ago09-03-2002 05:00Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.CVE-2001-0072gnuprivacy_guard1.97%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.CVE-2000-0974gnuprivacy_guard3.04%25y ago22-01-2001 05:00GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.

All vulnerabilities inprivacy_guard

CVE-2003-0255: gnu privacy_guard

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References