CVE-2003-0255

CVE-2003-0255 describes a critical vulnerability in GnuPG before version 1.2.2, where its key validation code incorrectly assigns the highest validity of any user ID to the entire key, failing to warn users when individual user IDs lack a trusted path. This flaw carries a CVSS score of 10.0, indicating a severe risk with network-based attacks, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and FAUCET Risk Score of 86/100, there is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.