Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
BID:55246
Info
Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
| Bugtraq ID: | 55246 |
| Class: | Design Error |
| CVE: |
CVE-2012-3582 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2012 12:00AM |
| Updated: | Aug 30 2012 12:00AM |
| Credit: | Greg Ose and Mark Gould of CME Group |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
Symantec PGP Universal Server is prone to an information disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
PGP Universal Server 3.2.x versions prior to 3.2.1 MP1 are affected.
Symantec PGP Universal Server is prone to an information disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
PGP Universal Server 3.2.x versions prior to 3.2.1 MP1 are affected.
Exploit / POC
Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
An attacker can exploit the issue using readily available tools.
An attacker can exploit the issue using readily available tools.
Solution / Fix
Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
Solution:
Vendor updates are available. Please see the references for details.
Solution:
Vendor updates are available. Please see the references for details.
References
Symantec PGP Universal Server Private Key Information Disclosure Vulnerability
References:
References: