CVE-2001-0071: GNU Privacy Guard

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.

Affected products

• GNU Privacy Guard: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.3b only

Published 2001-02-12. Last modified 2026-06-16.