cve/2000/CVE-2000-0678.md

### [CVE-2000-0678](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0678)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/hannob/pgpbugs