CVE-2012-3582 in Symantec PGP Universal Server
Sumário (Inglês)
Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user s session.
Reservar
19/06/2012
Divulgação
04/09/2012
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 6085 | Symantec PGP Universal Server Key Search Elevação de Privilégios | 264 | Prova de conceito | Correção oficial | CVE-2012-3582 |