NVD

Id
2161  
Name
CVE-2008-2235  
Description
OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-03  
Published
2008-08-01  
Modified Date
2016-12-07  
Seq
2008-2235  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13730 2161 CVE-2008-2235 SUSE-SR:2008:019  View
13731 2161 CVE-2008-2235 SUSE-SR:2009:004  View
13732 2161 CVE-2008-2235 GLSA-200812-09  View
13733 2161 CVE-2008-2235 MDVSA-2008:183  View
13734 2161 CVE-2008-2235 [opensc-announce] 20080731 OpenSC Security Vulnerability and new Versions of OpenSC, OpenCT, LibP11, Pam_P11, Engine_PKCS11  View
13735 2161 CVE-2008-2235 http://www.opensc-project.org/security.html  View
13736 2161 CVE-2008-2235 30473  View
13737 2161 CVE-2008-2235 opensc-smartcard-cryptotoken-weak-security(44140)  View
13738 2161 CVE-2008-2235 DSA-1627  View
13739 2161 CVE-2008-2235 FEDORA-2009-2267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49139 JVNDB-2008-004449 OpenSC における PIN を変更される脆弱性 OpenSC は、Siemens CardOS M4 を稼動しているスマートカードおよび USB 暗号トークン上の 5015 ディレクトリに対して脆弱なパーミッション (00 の ADMIN ファイルコントロール情報) を使用するため、PIN を変更される脆弱性が存在します。 CVE-2008-2235 32348 CVE-2008-2235 2161 4.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004449.html 2008-07-31 2012-09-25 View