CVE-2001-0071
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection. Date published : 2001-05-07 http://www.securityfocus.com/bid/2141 http://www.securityfocus.com/archive/1/152197