40 matches found
CentOS Update for pcsc-lite CESA-2010:0533 centos5 i386
Check for the Version of pcsc-lite OpenVAS Vulnerability Test CentOS Update for pcsc-lite CESA-2010:0533 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Debian DSA-2156-1 : pcscd - buffer overflow
MWR InfoSecurity identified a buffer overflow in pcscd, middleware to access a smart card via PC/SC, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA-2156-1] pcscd security update
------------------------------------------------------------------------ Debian Security Advisory DSA-2156-1 [email protected] http://www.debian.org/security/ Steve Kemp January 31, 2011 http://www.debian.org/security/faq -...
DSA-2156-1 pcsc-lite - buffer overflow
Bulletin has no description...
Mandriva Update for pcsc-lite MDVSA-2011:015 (pcsc-lite)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4531
Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...
CVE-2010-4530
Signedness error in ccidserial.c in libccid in the USB Chip/Smart Card Interface Devices CCID driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negati...
DEBIAN-CVE-2010-4530
Signedness error in ccidserial.c in libccid in the USB Chip/Smart Card Interface Devices CCID driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negati...
CVE-2010-4531
CVE-2010-4531 : PCSC-Lite’s ATRDecodeAtr in the ATR Handler (atrhandler.c) suffers a stack-based buffer overflow. The issue affects pcscd in PCSC-Lite 1.5.3 and possibly other 1.5.x/1.6.x versions, allowing a physically proximate attacker to cause a denial of service and potentially execute arbit...
Fedora 14 : ccid-1.4.0-2.fc14 (2011-0162)
This update fixes the following security issue : An integer overflow, leading to array index error was found in the way USB CCID Chip/Smart Card Interface Devices driver processed certain values of card serial number. A local attacker could use this flaw to execute arbitrary code, with the...
Fedora 13 : ccid-1.3.11-2.fc13 (2011-0143)
This update fixes the following security issue : An integer overflow, leading to array index error was found in the way USB CCID Chip/Smart Card Interface Devices driver processed certain values of card serial number. A local attacker could use this flaw to execute arbitrary code, with the...
CentOS 5 : pcsc-lite (CESA-2010:0533)
Updated pcsc-lite packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
pcsc security update
CentOS Errata and Security Advisory CESA-2010:0533 Updated pcsc-lite packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: pcsc-lite security update
Updated pcsc-lite packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
Debian Security Advisory DSA 2059-1 (pcsc-lite)
The remote host is missing an update to pcsc-lite announced via advisory DSA 2059-1. OpenVAS Vulnerability Test $Id: deb20591.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2059-1 pcsc-lite Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
CVE-2009-4901
PCSC-Lite (pcscd) before version 1.5.4 is affected by two VMs: CVE-2009-4901 (denial of service via crafted SCARD_SET_ATTRIB data) and CVE-2010-0407 (privilege escalation via crafted message data). The root cause is in MSGFunctionDemarshall in winscard_svc.c, where improper demarshalling leads to...
CVE-2009-4902
CVE-2009-4902 relates to a buffer overflow in the MSGFunctionDemarshall function of winscard_svc.c in the MUSCLE PCSC-Lite daemon (pcscd) up to version 1.5.4. Crafted SCARD_CONTROL message data could be improperly demarshalled, enabling a local attacker to gain privileges. The issue is linked to ...
CVE-2010-0407
PCSC-Lite (pcscd) affected by CVE-2010-0407: multiple buffer overflows in MSGFunctionDemarshall within winscard_svc.c can allow local privilege escalation on MUSCLE PCSC-Lite before 1.5.4. Affected versions include 1.5.3 and earlier; remediation is upgrading to 1.5.4 or later (as noted in multipl...
CVE-2009-4901
The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...