1460 matches found
[ MDVSA-2009:123 ] opensc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:123 http://www.mandriva.com/security/ Package : opensc Date : May 27, 2009 Affected: 2009.1 Problem Description: src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-part...
OpenSC Incorrect RSA Keys Generation Vulnerability
This host is installed with OpenSC and is prone to Insecure Key Generation vulnerability. OpenVAS Vulnerability Test $Id: secpodopenscinsecurekeygenerationvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenSC Incorrect RSA Keys Generation Vulnerability Authors: Antu Sanadi Copyright: Copyright c 20...
OpenSC < 0.11.8 Incorrect RSA Keys Generation Vulnerability
OpenSC is prone to an insecure key generation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
CVE-2009-1603
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
CVE-2009-1603
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
CVE-2009-1603
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
CVE-2009-1603
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
CVE-2009-1603
CVE-2009-1603 affects OpenSC 0.11.7, specifically src/tools/pkcs11-tool.c. When used with unspecified third‑party PKCS#11 modules, it generates RSA keys with incorrect public exponents, allowing an attacker to read the cleartext form of messages that were intended to be encrypted. This vulnerabil...
CVE-2009-1603
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...
PT-2009-1081 · Opensc · Opensc
Name of the Vulnerable Software and Affected Versions: OpenSC versions prior to 0.11.8 Description: The issue allows attackers to read the cleartext form of messages that were intended to be encrypted due to incorrect public exponents in generated RSA keys. Exploitation of the vulnerabilities can...
OpenSC 'pkcs11-tool'不安全密钥生成漏洞
Bugraq ID: 34884 CNCAN ID：CNCAN-2009050903 OpenSC是一款智能卡库和所及的应用程序。 OpenSC包含的'pkcs11-tool'模块存在设计错误，可导致使用不安全RSA公钥。 攻击者借此漏洞可获得对私有解密密钥的访问，成功利用漏洞允许攻击者获得敏感信息或未授权访问智能卡。 成功利用漏洞需要如下组合： 1，工具设置public指数为1来生成密钥。 2，PKCS11模块接收这个公共指数并转发到卡上。 3，卡接收public指数并生成RSA密钥. OpenSC OpenSC 0.11.7 OpenSC OpenSC SVN trunk...
MDVA-2008:145 : opensc
OpenSC is missing openct linking. As a result, no cards using openct are seen and therefore cannot be used. This update builds OpenSC with openct linking. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...
Mandriva Linux Security Advisory : opensc (MDVSA-2008:183)
Chaskiel M Grundman found that OpenSC would initialize smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card's PIN without first having the PIN or PUK, or the superuser's PIN or PUK CVE-2008-2235. Please note that this...
Fedora 10 : opensc-0.11.7-1.fc10 (2009-2266)
Security update fixing CVE-2009-0368. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Mandriva Linux Security Advisory : opensc (MDVSA-2009:089)
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program. The updated packages f...
Mandrake Security Advisory MDVSA-2009:089 (opensc)
The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. OpenVAS Vulnerability Test $Id: mdksa2009089.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:089 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Mandrake Security Advisory MDVSA-2009:089 (opensc)
The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
[ MDVSA-2009:089 ] opensc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:089 http://www.mandriva.com/security/ Package : opensc Date : April 9, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Problem Description: OpenSC before 0.11.7 allows physically proximate attackers to...