CNCVE编号：CNCVE-20010072 CVE编号：CVE-2001-0072 安全级别：中 漏洞中文描述： gpg (aka GnuPG) 1.0.4 及其它版本从公钥服务器上既可以获得公钥而且可以在不通知用户的情况下获得私钥, 这允许攻击者闯入受信任的网络。 漏洞英文描述： gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust. 漏洞参考： REDHAT:RHSA-2000-131 MANDRAKE:MDKSA-2000-087 DEBIAN:DSA-010-1 CONECTIVA:CLA-2000:368 BUGTRAQ:20001220 Trustix Security Advisory - gnupg, ftpd-BSD BID:2153 XF:gnupg-reveal-private 系统类型：其他 漏洞类型：设计错误