CVE-2000-0445: Pgp

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys.

Affected products

• Pgp Pgp: version 5.0_linux only; version 5.0i only; version 6.5_linux only

Published 2000-05-24. Last modified 2026-06-16.