Description
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key.
References
- 20010319 Have they found a serious PGP vulnerability?! mailing-list
- 20010322 Re: Yes, they have found a serious PGP vulnerability...sort of mailing-list
- 20010320 Yes, they have found a serious PGP vulnerability...sort of mailing-list
- 11966 vdb-entry
- openpgp-private-key-disclosure(6558) vdb-entry
- RHSA-2001:063 vendor-advisory
- 2673 vdb-entry