CVE-2002-1284

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 29, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-12857.2runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.CVE-2002-12867.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different CVE-2002-12875.0Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial ofCVE-2002-12885.0The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet CVE-2002-12897.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial oCVE-2002-12906.4The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard viCVE-2002-12915.0The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares viCVE-2002-12927.5The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the StanCVE-2002-12937.5The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loaderCVE-2002-12947.5The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows CVE-2002-12957.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly cCVE-2002-12967.2Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in
CVE-2002-1284: Medium severity, CVSS 4.6 | Vulnix