Fedora 10 : opensc-0.11.8-1.fc10 (2009-4919)

A minor update fixing security problem within pkcs11-tool command. http://www.opensc-project.org/pipermail/opensc-announce/2009-May/00002 5.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

OpenSC crypto vulnerability

pkcs11-tool invalid keys generation allows message decryption...

CVE-2009-1603

CVE-2009-1603 affects OpenSC 0.11.7, specifically src/tools/pkcs11-tool.c. When used with unspecified third‑party PKCS#11 modules, it generates RSA keys with incorrect public exponents, allowing an attacker to read the cleartext form of messages that were intended to be encrypted. This vulnerabil...

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

OpenSC 'pkcs11-tool'不安全密钥生成漏洞

Bugraq ID: 34884 CNCAN ID：CNCAN-2009050903 OpenSC是一款智能卡库和所及的应用程序。 OpenSC包含的'pkcs11-tool'模块存在设计错误，可导致使用不安全RSA公钥。 攻击者借此漏洞可获得对私有解密密钥的访问，成功利用漏洞允许攻击者获得敏感信息或未授权访问智能卡。 成功利用漏洞需要如下组合： 1，工具设置public指数为1来生成密钥。 2，PKCS11模块接收这个公共指数并转发到卡上。 3，卡接收public指数并生成RSA密钥. OpenSC OpenSC 0.11.7 OpenSC OpenSC SVN trunk...

MDVA-2008:178 : openvpn

The OpenVPN package that shipped with Mandriva Linux 2009.0 does not come with pkcs11 support, which meant that pkcs11 could not be used together with OpenVPN. This updated package fixes this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

Mandriva Update for openvpn MDVA-2008:178 (openvpn)

Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2008:178 openvpn Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for openvpn MDVA-2008:178 (openvpn)

Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2008:178 openvpn Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDKA-2006:056 : drakxtools

Several bugs were fixed in drakxtools: - it was not possible to start rpmdrake from the menu 26383 - it was not possible to set up updates media and then distro media or the reverse in edit-urpm-sources - drakauth: o add encrypted home and pammount support o hide password when calling 'net join' ...

CVE-2002-1446

The error checking routine used for the CVerify call on a symmetric verification key in the nCipher PKCS11 library 1.2.0 and later returns the CKROK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages...