|
PGP Passphrase Cache Expiration Vulnerability
Pretty Good Privacy is the general-purpose encryption application distributed and maintained by Network Associates. This problem affects users of the software on the Microsoft Windows platforms. PGP may not expire cached passphrases after the user-specified amount of time. Additionally, cached passphrases may be stored in memory until a user terminates their session on a system, which could potentially result in an application recovering the passphrase from system memory. This could result in a compromise of the integrity of information encrypted by a user of PGP. It should be noted that this vulnerability is present only with the most current patches applied to PGP 7.0.4. |
|
|
Privacy Statement |
