CVE-2003-0971 Weak cryptography in n/a

Medium 5.0 Published 2 Dec 2003 Updated 8 Aug 2024

Attackers can recover private keys from signatures due to flawed ElGamal key generation in GnuPG, compromising encrypted data confidentiality.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2003-0971?

CVE-2003-0971 is a medium-severity vulnerability in n/a, published on 2 Dec 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

Which versions are affected by CVE-2003-0971?

It affects 1 product.

Linux distribution packages (8)

`gnupg` Red Hat:enterprise_linux:3::as	All versions	`0:1.2.1-10`
`gnupg-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:1.2.1-10`
`gnupg` Red Hat:enterprise_linux:3::desktop	All versions	`0:1.2.1-10`
`gnupg-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:1.2.1-10`
`gnupg` Red Hat:enterprise_linux:3::es	All versions	`0:1.2.1-10`
`gnupg-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:1.2.1-10`
`gnupg` Red Hat:enterprise_linux:3::ws	All versions	`0:1.2.1-10`
`gnupg-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:1.2.1-10`

Products include Gnu Privacy Guard.

How do I fix CVE-2003-0971?

Upgrade to a fixed version.

Is CVE-2003-0971 being exploited?

There is no known exploitation of CVE-2003-0971 in the wild and no public exploit code.

Sources

Also known as DSA-429, GHSA-3rmj-3mrh-fv5j, RHSA-2003:395.