[SECURITY] Fedora 9 Update: opensc-0.11.8-1.fc9

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 10 Update: opensc-0.11.8-1.fc10

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 11 Update: opensc-0.11.8-1.fc11

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

OpenSC < 0.11.8 Incorrect RSA Keys Generation Vulnerability

OpenSC is prone to an insecure key generation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

Code injection

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2008:158)

A vulnerability was found in the SILC toolkit before version 1.1.5 that allowed a remote attacker to cause a denial of service crash, or possibly execute arbitrary code via long input data CVE-2008-1227. A vulnerability was found in the SILC toolkit before version 1.1.7 that allowed a remote...

Mandriva Update for silc-toolkit MDVSA-2008:158 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVSA-2008:158 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 9 Update: opensc-0.11.7-1.fc9

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 10 Update: opensc-0.11.7-1.fc10

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

Fedora Update for nss FEDORA-2007-278

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2007-278 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access

OpenSC 0.11.x - PKCS11 Implementation Unauthorized Access source: https://www.securityfocus.com/bid/33922/info OpenSC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks. Versions prior to...

OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access

source: https://www.securityfocus.com/bid/33922/info OpenSC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks. Versions prior to OpenSC 0.11.7 are vulnerable. The following proof of conce...

Fedora Core 9 FEDORA-2009-1276 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1276. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-1291 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1291. OpenVAS Vulnerability Test $Id: fcore20091291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1291 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 9 FEDORA-2009-1276 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1276. OpenVAS Vulnerability Test $Id: fcore20091276.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1276 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] Fedora 10 Update: nss-3.12.2.0-4.fc10

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Design/Logic Flaw

The PK11SESSION cache in the OpenSSL PKCS11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service failed cryptographic operations via unspecified vectors, related to the 1 RSAsign and ...

CVE-2008-5410

The PK11SESSION cache in the OpenSSL PKCS11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service failed cryptographic operations via unspecified vectors, related to the 1 RSAsign and ...

OpenSC: Insufficient protection of smart card PIN

Background OpenSC is a smart card application that allows reading and writing via PKCS11. Description Chaskiel M Grundman reported that OpenSC uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4. Impact A...