493 matches found
CVE-2006-3896
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX...
CVE-2006-3896
CVE-2006-3896 affects NeoScale Systems CryptoStor 700 series appliances prior to firmware 2.6. The vulnerability stems from client-side ActiveX-based smartcard authentication; disabling ActiveX bypasses the second-factor, allowing an attacker with valid username/password to gain admin access. Imp...
Platinum Secure smartcard security bypass
======================================================== - Platinum Secure Smart Card security bypass technique - ======================================================== Vendor: http://360degreeweb.com Vendor informed: nope...but Acer were Impact : pretty high Vulnerable Systems ----------------...
CVE-2004-0701
Sun Ray Server Software SRSS 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access...
CVE-2004-0701
The affected product is Sun Ray Server Software (SRSS) 1.3 and 2.0 running on Solaris 2.6, 7, or 8. The issue is that SRSS does not reliably detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which can leave a user session logged in and allow local users t...
CVE-2004-0701
Sun Ray Server Software SRSS 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access...
CVE-2004-0701: Undefined Security Weakness
Sun Ray Server Software SRSS 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access...
Solaris 9 (sparc) : 112926-06
SunOS 5.9: smartcard Patch. Date this patch was last updated by Sun : Feb/16/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Sun Ray Smartcard reader may leave desktop session open when card is quickly removed
Overview The Sun Ray Smartcard reader fails to properly detect a "quick removal, reinsertion and removal of a Smartcard." Description The Sun Ray is a thin client computing device designed to process user input and output, and provide access to computing services hosted by a server. Authenticatio...
ACER Travelmate 600 and 800 series - Smartcard flawed Implementation
Background ------------------- Acer Travelmate 600, 800 series notebooks include a smartcard reader, two smartcards and a security application called Platinum Secure. The smart card security system should prevent access to the console while the smartcard is not present or when password has not be...
CVE-2002-2036
Sun Ray Server Software SRSS 1.3, when Non-Smartcard Mobility NSCM is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client...