Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2235
HistoryAug 01, 2008 - 12:00 a.m.

CVE-2008-2235

2008-08-0100:00:00
ubuntu.com
ubuntu.com
8

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

0.001 Low

EPSS

Percentile

22.7%

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information
of 00) for the 5015 directory on smart cards and USB crypto tokens running
Siemens CardOS M4, which allows physically proximate attackers to change
the PIN.

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

0.001 Low

EPSS

Percentile

22.7%