NetSight
IP …
medium5.0

CVE-2003-0971

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, whic…

Impact

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

Affected products

VendorProductAffected versions
GnuPrivacy Guard
Versions 1.0.2, 1.0.3, 1.0.3b, 1.0.4, 1.0.5, 1.0.6

References