Unrated severityNVD Advisory· Published Sep 4, 2001· Updated Apr 16, 2026
CVE-2001-1016
CVE-2001-1016
Description
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."
Affected products
8- cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*
cpe:2.3:a:pgp:e-business_server:6.5.8:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pgp:e-business_server:6.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:pgp:e-business_server:7.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:pgp:e-business_server:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:pgp:pgp:5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pgp:pgp:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:pgp:pgp:6.0.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.pgp.com/support/product-advisories/pgpsdk.aspnvdPatchVendor Advisory
- www.securityfocus.com/archive/1/211806nvdPatchVendor Advisory
- www.securityfocus.com/bid/3280nvdPatchVendor Advisory
- www.osvdb.org/1946nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/7081nvd
News mentions
0No linked articles in our index yet.