Home » Hacking News » PGP Invalid Key Display Vulnerability
FYI:
PGP Security provides privacy and data confidentiality software.
Credits go to Sieuwert van Otterloo.
PGP Invalid Key Display Vulnerability
by Phiber on September 6th, 2001 There is a vulnerability in some of PGP's display of key validity which could allow a user to be tricked into accepting a key associated with an invalid user ID.
Attackers may be able to forge signatures if the key is accepted into the target's keyring.
Solution:
Network Associates PGP Corporate Desktop 7.1:
Network Associates hotfix PGP_Hotfix0904_Win32.zip
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/PGP_Hotfix0904_Win32.zip
Hotfix for Windows platforms.
Network Associates hotfix PGP_Hotfix0904_Mac.sit.bin
http://download.nai.com/products/licensed/pgp/desktop_security/mac/version_7.1/hotfix/PGP_Hotfix0904_Mac.sit.bin
Hotfix for Mac platform.
Network Associates PGP E-Business Server 7.1:
Network Associates hotfix PGPEBiz71_Hotfix0904_AIX.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.1/hotfix/PGPEBiz71_Hotfix0904_AIX.tar.gz
Hotfix for AIX.
Network Associates hotfix PGPEBiz71_Hotfix0904_HPUX.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.1/hotfix/PGPEBiz71_Hotfix0904_HPUX.tar.gz
Hotfix for HPUX.
Network Associates hotfix PGPEBiz71_Hotfix0904_Linux.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.1/hotfix/PGPEBiz71_Hotfix0904_Linux.tar.gz
Hotfix for Linux.
Network Associates hotfix PGPEBiz71_Hotfix0904_Solaris.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.1/hotfix/PGPEBiz71_Hotfix0904_Solaris.tar.gz
Hotfix for Solaris.
Network Associates PGP E-Business Server 7.0.4:
Network Associates hotfix PGPEBiz70_Hotfix0904_AIX.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.0/hotfix/PGPEBiz70_Hotfix0904_AIX.tar.gz
Hotfix for AIX.
Network Associates hotfix PGPEBiz70_Hotfix0904_HPUX.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.0/hotfix/PGPEBiz70_Hotfix0904_HPUX.tar.gz
Hotfix for HPUX.
Network Associates hotfix PGPEBiz70_Hotfix0904_Linux.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.0/hotfix/PGPEBiz70_Hotfix0904_Linux.tar.gz
Hotfix for Linux.
Network Associates hotfix PGPEBiz70_Hotfix0904_Solaris.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/unix/version_7.0/hotfix/PGPEBiz70_Hotfix0904_Solaris.tar.gz
Hotfix for Solaris.
Network Associates PGP E-Business Server 6.5.8:
Network Associates hotfix PGPEBus658_Hotfix0904_OS390.tar.gz
http://download.nai.com/products/licensed/pgp/e-business/MVS/version_6.5.8/hotfix/PGPEBus658_Hotfix0904_OS390.tar.gz
Hotfix for OS/390 Platform.
Network Associates PGP Freeware 7.0.3:
Network Associates hotfix PGP_Hotfix0904_Win32.zip
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/PGP_Hotfix0904_Win32.zip
Hotfix for Windows platforms.
Network Associates hotfix PGP_Hotfix0904_Mac.sit.bin
http://download.nai.com/products/licensed/pgp/desktop_security/mac/version_7.1/hotfix/PGP_Hotfix0904_Mac.sit.bin
Hotfix for Mac platform.
Network Associates PGP Personal Security 7.0.3:
Network Associates hotfix PGP_Hotfix0904_Win32.zip
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/PGP_Hotfix0904_Win32.zip
Hotfix for Windows platforms.
Network Associates hotfix PGP_Hotfix0904_Mac.sit.bin
http://download.nai.com/products/licensed/pgp/desktop_security/mac/version_7.1/hotfix/PGP_Hotfix0904_Mac.sit.bin
Hotfix for Mac platform.
FYI:
PGP Security provides privacy and data confidentiality software.
Credits go to Sieuwert van Otterloo.
