← Database

CVE-2003-0971

MEDIUM CVSS: 5.0 Published: 2003-12-15 Modified: 2026-06-16

Description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

Affected Platforms

Gnu Privacy Guard

Weakness Type

NVD-CWE-Other

References