2303 matches found
Code injection
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
System: unauthenticated user can request SCEP one-time PIN decryption
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authorit...
System: SCEP one-time PIN reuse
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
System: SCEP one-time PIN reuse
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
System: unauthenticated user can request SCEP one-time PIN decryption
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authorit...
Apple iPhone 锁屏安全绕过漏洞
Bugtraq ID: 44419 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS新版中的一个严重漏洞，iPhone在处理紧急呼叫时再次出现可绕过锁屏PIN Apple iOS 4.0.1 Apple iOS 4.2 beta Apple iOS 4.1 厂商补丁： Apple ------- 目前没有详细解决方案提供： http://www.apple.com/iphone/ 实现方法如下： 1.在PIN输入屏幕点击紧急呼叫按钮。 2.随意输入一些号码，例如1337并拨打。...
Chip and PIN Security Completely Broken by New Attack
A group of researchers has found a significant flaw in the chip-and-PIN security system used by credit card companies in the UK. The weakness allows an attacker to use a card without the PIN associated with it. In a normal transaction using the chip-and-PIN system, the cardholder needs to enter a...
GLSA-200908-01 : OpenSC: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200908-01 OpenSC: Multiple vulnerabilities Multiple vulnerabilities were found in OpenSC: b.badrignans discovered that OpenSC incorrectly initialises private data objects CVE-2009-0368. Miquel Comas Marti discovered that...
openSUSE Security Update : libopensc2 (libopensc2-598)
Private data objects on smartcards initialized with OpenSC could be accessed without authentication CVE-2009-0368. Only blank cards initialized with OpenSC are affected by this problem. Affected cards need to be manually fixed, updating the opensc package alone is not sufficient! Please carefully...
openSUSE Security Update : libopensc2 (libopensc2-598)
Private data objects on smartcards initialized with OpenSC could be accessed without authentication CVE-2009-0368. Only blank cards initialized with OpenSC are affected by this problem. Affected cards need to be manually fixed, updating the opensc package alone is not sufficient! Please carefully...
openSUSE 10 Security Update : libopensc2 (libopensc2-6071)
Private data objects on smartcards initialized with OpenSC could be accessed without authentication CVE-2009-0368. Only blank cards initialized with OpenSC are affected by this problem. Affected cards need to be manually fixed, updating the opensc package alone is not sufficient! Please carefully...
Mandriva Linux Security Advisory : opensc (MDVSA-2009:089)
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program. The updated packages f...
Mandrake Security Advisory MDVSA-2009:089 (opensc)
The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
OpenSC protection bypass
It's possible to obtain access to smart card data without entering PIN...
Mandriva Update for initscripts MDVA-2008:085 (initscripts)
Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDVA-2008:085 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for bluez-utils MDVA-2008:189 (bluez-utils)
Check for the Version of bluez-utils OpenVAS Vulnerability Test Mandriva Update for bluez-utils MDVA-2008:189 bluez-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for bluez-utils MDVA-2008:189 (bluez-utils)
Check for the Version of bluez-utils OpenVAS Vulnerability Test Mandriva Update for bluez-utils MDVA-2008:189 bluez-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Code injection
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...
CVE-2008-6539
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...
CVE-2008-6539
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...