NVD

Id
48872  
Name
CVE-2009-1603  
Description
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-05-11  
Modified Date
2009-08-08  
Seq
2009-1603  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246958 48872 CVE-2009-1603 GLSA-200908-01  View
246959 48872 CVE-2009-1603 MDVSA-2009:123  View
246960 48872 CVE-2009-1603 [opensc-announce] 20090508 OpenSC 0.11.8 released with security update  View
246961 48872 CVE-2009-1603 [oss-security] 20090508 OpenSC 0.11.8 released with security update  View
246962 48872 CVE-2009-1603 ADV-2009-1295  View
246963 48872 CVE-2009-1603 FEDORA-2009-4928  View
246964 48872 CVE-2009-1603 FEDORA-2009-4967  View
246965 48872 CVE-2009-1603 FEDORA-2009-4919  View
246966 48872 CVE-2009-1603 FEDORA-2009-4883  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43644 JVNDB-2009-004651 OpenSC の pkcs11-tool におけるメッセージを平文で読まれる脆弱性 OpenSC の pkcs11-tool の src/tools/pkcs11-tool.c は、不特定のサードパーティの PKCS#11 モジュールが使用される際、間違った公開指数を伴う RSA の鍵を生成するため、暗号化されるはずであったメッセージを平文で読まれる脆弱性が存在します。 CVE-2009-1603 39034 CVE-2009-1603 48872 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004651.html 2009-05-08 2012-09-25 View