801 matches found
CVE-2008-3972
CVE-2008-3972 relates to OpenSC prior to 0.11.6 where security updates to a smart card are not applied unless the card label matches “OpenSC”; this can allow physically proximate attackers to bypass patched vulnerabilities (as linked to CVE-2008-2235). Connected OpenVAS entries show SLES9/SLES10 ...
openSUSE 10 Security Update : libopensc2 (libopensc2-5494)
This update fixes a security issues with opensc that occurs during initializing blank smart cards with Siemens CardOS M4. It allows to set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: Already initialized cards are still vulnerable after this update. Please use the...
[SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1627-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 04, 2008 http://www.debian.org/security/faq -...
OpenSC smart cards unauthrorized access
It's possible to change smrtcard PIN code...
[SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1627-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 04, 2008 http://www.debian.org/security/faq -...
RHEL 5 : coolkey (RHSA-2007:0631)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0631 advisory. coolkey contains the driver support for the CoolKey and Common Access Card CAC Smart Card products. The CAC is used by the U.S. Government. Steve Gru...
Low: Red Hat Security Advisory: coolkey security and bug fix update
Updated coolkey packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. coolkey contains the driver support for the CoolKey and Common Access Card CAC Smar...
MDKA-2006:052 : opensc
Opensc is a library for accessing smart card devices. This update fixes a problem which prevented Oberthur smart cards from being recognized and used. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06....
Microsoft PKINIT smart card logon vulnerable to information disclosure and spoofing
Overview Microsoft PKINIT smart card authentication is vulnerable to an information disclosure flaw that may allow an attacker to spoof a trusted server. Description From the Microsoft PKINIT description: PKINIT is an Internet Engineering Task Force IETF Internet Draft for "Public Key Cryptograph...
Acer TravelMate notebooks smart cards protection bypass
It's possible to bypass screen locking with help system...
CVE-2005-1982
CVE-2005-1982 is a PKINIT vulnerability in Kerberos used by smart card logon on Windows 2000/XP/Server 2003. The flaw allows information disclosure and spoofing by injecting into an authentication session between a client and a domain controller, potentially enabling a malicious server to imperso...
CVE-2005-1982
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle MITM attack between a client and a domain controller when PKINIT smart card authentication is bein...
CVE-2005-1982
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle MITM attack between a client and a domain controller when PKINIT smart card authentication is bein...
Multiple Microsoft Windows Kerberos service vulnerabilities
DoS on protocol parsing. Ability so spoof server on smart card authentication...
Solaris 8 (sparc) : 108909-13
CDE 1.4: Smart Card Administration GUI patch. Date this patch was last updated by Sun : Feb/26/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Unauthorized ACER Travelmate access
If smart card protection is used it's still possible to access system for short time...
Multiple vulnerabilities exist within credit card chips thereby allowing malicious user to bypass authentication mechanism
Overview French smart card reader terminals can be fooled into accepting imposter smart cards for payment. Description French smart cards are credit cards with an embedded chip containing certain cardholder, account, and authentication information. These cards are read by automated terminals acro...
nCipher Advisory #4: Console Java apps can leak passphrases on Windows
nCipherTM Security Advisory No. 4 Console Java applications can leak passphrases on Windows ========================================================= SUMMARY ======= In certain circumstances, JavaTM applications using the standard nCipher ConsoleCallBack class on Windows NT/2000 can be made to le...
