CVE-2003-0971: gnu privacy_guard

EPSS trend

Probability

3.64%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

+0.78 pp

From 2.85% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.64%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

25 links

www.redhat.com/support/errata/RHSA-2003-395.htmlVendor AdvisoryX Refsource REDHAT
www.novell.com/linux/security/advisories/2003_048_gpg.htmlVendor AdvisoryX Refsource SUSE
www.kb.cert.org/vuls/id/940388Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/10349Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=106995769213221&w=2Mailing ListX Refsource BUGTRAQ
www.debian.org/security/2004/dsa-429Vendor AdvisoryX Refsource DEBIAN
lists.gnupg.org/pipermail/gnupg-announce/2003q4/000276.htmlX Refsource CONFIRMPatchVendor AdvisoryARTICLE
www.securityfocus.com/bid/9115VDB EntryX Refsource BIDPatchVendor Advisory
lists.gnupg.org/pipermail/gnupg-announce/2003q4/000277.htmlX Refsource CONFIRMPatchARTICLE
www.redhat.com/support/errata/RHSA-2003-390.htmlVendor AdvisoryX Refsource REDHAT

Show all 25 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10982VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/10399Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/10304Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2003:109Vendor AdvisoryX Refsource MANDRAKE
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798Vendor AdvisoryX Refsource CONECTIVA
secunia.com/advisories/10400Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2003:395Advisory
access.redhat.com/security/updates/classification/ARTICLE
lists.gnupg.org/pipermail/gnupg-users/2003-November/020779.htmlARTICLE
bugzilla.redhat.com/show_bug.cgi?id=111345REPORT
security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_395.jsonAdvisory
access.redhat.com/security/cve/CVE-2003-0971REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617110REPORT
www.cve.org/CVERecord?id=CVE-2003-0971Advisory
nvd.nist.gov/vuln/detail/CVE-2003-0971Advisory

Related vulnerabilities

CVE-2003-0255gnuprivacy_guard6.56%23y ago07-05-2003 04:00The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.CVE-2003-0978gnuprivacy_guard2.76%22y ago10-12-2003 05:00Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.CVE-2001-0071gnuprivacy_guard0.40%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.CVE-2001-0522gnuprivacy_guard13.73%24y ago09-03-2002 05:00Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.CVE-2001-0072gnuprivacy_guard1.97%25y ago07-05-2001 04:00gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.CVE-2000-0974gnuprivacy_guard3.04%25y ago22-01-2001 05:00GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.

All vulnerabilities inprivacy_guard

CVE-2003-0971: gnu privacy_guard

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References