CVE:CVE-2001-1016
CNNVD:CNNVD-200109-009
PGP Corporate Desktop 7.1之前版本，Personal Security 7.0.3之前版本，Freeware 7.0.3之前版本，和E-Business Server 7.1之前版本在无效用户ID签订消息时不能正确显示。攻击者通过增加第二个无效用户ID给第三方签订的密钥，使得用户相信文档已经由信任的第三方签订。也称为“PGPsdk密钥有效漏洞”。
solution:Upgrade pgp corporate_desktop to a higher version than 7.1,and avoid the version 7.1; Upgrade pgp e-business_server to a higher version than 6.5.8,7.0.4,7.1,and avoid the version 6.5.8,7.0.4,7.1; Upgrade pgp freeware to a higher version than 7.0.3,and avoid the version 7.0.3; Upgrade pgp personal_security to a higher version than 7.0.3,and avoid the version 7.0.3; Upgrade pgp pgp to a higher version than 5.0,6.0.2,and avoid the version 5.0,6.0.2