VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 4, 2001· Updated Jun 16, 2026

CVE-2001-1016

CVE-2001-1016

Description

PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."

Affected products

11
  • PGP Corporation/Corporate Desktop2 versions
    cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*
    • (no CPE)range: <7.1
  • PGP Corporation/E Business Server4 versions
    cpe:2.3:a:pgp:e-business_server:6.5.8:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:pgp:e-business_server:6.5.8:*:*:*:*:*:*:*
    • cpe:2.3:a:pgp:e-business_server:7.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:pgp:e-business_server:7.1:*:*:*:*:*:*:*
    • (no CPE)range: <7.1
  • PGP Corporation/Freeware
    cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*
  • PGP Corporation/Personal Security2 versions
    cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*
    • (no CPE)range: <7.0.3
  • PGP Corporation/Pgp2 versions
    cpe:2.3:a:pgp:pgp:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pgp:pgp:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:pgp:pgp:6.0.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.