CVE Vulnerabilities

CVE-2009-0368

Published: Mar 02, 2009 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.

Affected Software

Name Vendor Start Version End Version
Opensc Opensc-project * 0.11.6 (including)
Opensc Opensc-project 0.3.2 (including) 0.3.2 (including)
Opensc Opensc-project 0.3.5 (including) 0.3.5 (including)
Opensc Opensc-project 0.4.0 (including) 0.4.0 (including)
Opensc Opensc-project 0.5.0 (including) 0.5.0 (including)
Opensc Opensc-project 0.6.0 (including) 0.6.0 (including)
Opensc Opensc-project 0.6.1 (including) 0.6.1 (including)
Opensc Opensc-project 0.7.0 (including) 0.7.0 (including)
Opensc Opensc-project 0.8 (including) 0.8 (including)
Opensc Opensc-project 0.8.0 (including) 0.8.0 (including)
Opensc Opensc-project 0.8.0.0 (including) 0.8.0.0 (including)
Opensc Opensc-project 0.8.1 (including) 0.8.1 (including)
Opensc Opensc-project 0.9 (including) 0.9 (including)
Opensc Opensc-project 0.9.2 (including) 0.9.2 (including)
Opensc Opensc-project 0.9.3 (including) 0.9.3 (including)
Opensc Opensc-project 0.9.4 (including) 0.9.4 (including)
Opensc Opensc-project 0.9.5 (including) 0.9.5 (including)
Opensc Opensc-project 0.9.6 (including) 0.9.6 (including)
Opensc Opensc-project 0.9.7 (including) 0.9.7 (including)
Opensc Opensc-project 0.9.7-b (including) 0.9.7-b (including)
Opensc Opensc-project 0.9.7-d (including) 0.9.7-d (including)
Opensc Opensc-project 0.9.8 (including) 0.9.8 (including)
Opensc Opensc-project 0.10.0 (including) 0.10.0 (including)
Opensc Opensc-project 0.10.1 (including) 0.10.1 (including)
Opensc Opensc-project 0.11.0 (including) 0.11.0 (including)
Opensc Opensc-project 0.11.1 (including) 0.11.1 (including)
Opensc Opensc-project 0.11.2 (including) 0.11.2 (including)
Opensc Opensc-project 0.11.3 (including) 0.11.3 (including)
Opensc Opensc-project 0.11.3-pre3 (including) 0.11.3-pre3 (including)
Opensc Opensc-project 0.11.4 (including) 0.11.4 (including)
Opensc Opensc-project 0.11.5 (including) 0.11.5 (including)

References