CVE-2003-0971

MEDIUM · CVSS 5 EPSS 2.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-12-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2003-0971

Severity

MEDIUM

CVSS

EPSS

2.85%

Original NVD Description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.