CVE-2002-1284

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-11-29 · updated 2026-06-16

Description

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read.

Affected products

Kgpg: 0.6, 0.6.1, 0.7, 0.8, 0.8.1, 0.8.2

References

http://devel-home.kde.org/~kgpg/bug.html
http://marc.info/?l=bugtraq&m=103702926611286&w=2
http://www.securityfocus.com/bid/6152
https://exchange.xforce.ibmcloud.com/vulnerabilities/10629
http://devel-home.kde.org/~kgpg/bug.html
http://marc.info/?l=bugtraq&m=103702926611286&w=2
http://www.securityfocus.com/bid/6152
https://exchange.xforce.ibmcloud.com/vulnerabilities/10629

Get alerted when CVE-2002-1284 or the next vulnerability affects your stack