NetSight
high7.5

CVE-2000-0974

GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents …

Impact

GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.

Affected products

VendorProductAffected versions
GnuPrivacy Guard
Versions 1.0, 1.0.1, 1.0.2, 1.0.3

References