← Vulnerability feed

Vulnerability record · CVE-2002-1977 · published 31 December 2002

CVE-2002-1977: Pgp vulnerability

PPgp · Pgp

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.

2.1 CVSS 2.0 Low EPSS 0.35% · top 73.5%
2.1CVSS 2.0 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.

AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html
http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html
http://www.iss.net/security_center/static/9690.php Patch
http://www.securityfocus.com/bid/5318
http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html
http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html
http://www.iss.net/security_center/static/9690.php Patch
http://www.securityfocus.com/bid/5318

Track CVE-2002-1977 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2001-1016Pgp corporate desktop vulnerabilityPGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display w…EPSS 1.4%5.0CVE-2000-0678Pgp vulnerabilityPGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which …EPSS 1.5%4.6CVE-2001-0435Pgp vulnerabilityThe split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on…EPSS 0.33%2.1CVE-2001-0265Pgp vulnerabilityASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.EPSS 0.72%2.1CVE-2000-0445Pgp vulnerabilityThe pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce pred…EPSS 0.41%

Source: NIST National Vulnerability Database (record CVE-2002-1977), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.