VULNERABILITY INTELLIGENCE

CVE-2003-0971

CVSS score5 MEDIUM
EPSS probability3.64%
CISA KEVNot currently listed
Published2003-12-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

Primary references