Symantec PGP Universal Server private key information leakage Vulnerability

Release date:
Updated on: 2012-09-02

Affected Systems:
Symantec PGP Universal Server <3.2.1 MP1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55246
Cve id: CVE-2012-3582

Symantec PGP Universal Server manages multiple PGP platform encryption applications on a single console.

Symantec PGP Universal Server 3.2.1 and earlier versions of MP1 have the information leakage vulnerability. Attackers can exploit this vulnerability to access sensitive information.

<* Source: Greg Ose
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Symantec
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.symantec.com/business/security_response/