pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pgp4pine | Holger_lamm | 1.75.6 (including) | 1.75.6 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html
- http://www.kb.cert.org/vuls/id/566640
- http://www.securityfocus.com/bid/2405
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6135
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html
- http://www.kb.cert.org/vuls/id/566640
- http://www.securityfocus.com/bid/2405
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6135