CVE Vulnerabilities

CVE-2013-4425

Published: Nov 18, 2013 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using SuperSecretPassword as the hardcoded password, which allows local users to obtain the private key.

Affected Software

Name Vendor Start Version End Version
Osirix Osirix-viewer * 5.7 (including)
Osirix Osirix-viewer 0.2 (including) 0.2 (including)
Osirix Osirix-viewer 1.0 (including) 1.0 (including)
Osirix Osirix-viewer 1.1 (including) 1.1 (including)
Osirix Osirix-viewer 1.1.2 (including) 1.1.2 (including)
Osirix Osirix-viewer 1.2 (including) 1.2 (including)
Osirix Osirix-viewer 1.3 (including) 1.3 (including)
Osirix Osirix-viewer 1.4 (including) 1.4 (including)
Osirix Osirix-viewer 1.5 (including) 1.5 (including)
Osirix Osirix-viewer 1.5.1 (including) 1.5.1 (including)
Osirix Osirix-viewer 1.5.2 (including) 1.5.2 (including)
Osirix Osirix-viewer 1.6 (including) 1.6 (including)
Osirix Osirix-viewer 1.6.2 (including) 1.6.2 (including)
Osirix Osirix-viewer 1.6.3 (including) 1.6.3 (including)
Osirix Osirix-viewer 1.6.4 (including) 1.6.4 (including)
Osirix Osirix-viewer 1.6.5 (including) 1.6.5 (including)
Osirix Osirix-viewer 1.7 (including) 1.7 (including)
Osirix Osirix-viewer 1.7.1 (including) 1.7.1 (including)
Osirix Osirix-viewer 2.0 (including) 2.0 (including)
Osirix Osirix-viewer 2.1 (including) 2.1 (including)
Osirix Osirix-viewer 2.2 (including) 2.2 (including)
Osirix Osirix-viewer 2.3 (including) 2.3 (including)
Osirix Osirix-viewer 2.3.1 (including) 2.3.1 (including)
Osirix Osirix-viewer 2.4 (including) 2.4 (including)
Osirix Osirix-viewer 2.5 (including) 2.5 (including)
Osirix Osirix-viewer 2.6 (including) 2.6 (including)
Osirix Osirix-viewer 2.7.5 (including) 2.7.5 (including)
Osirix Osirix-viewer 3.0 (including) 3.0 (including)
Osirix Osirix-viewer 3.1 (including) 3.1 (including)
Osirix Osirix-viewer 3.2.1 (including) 3.2.1 (including)
Osirix Osirix-viewer 3.3 (including) 3.3 (including)
Osirix Osirix-viewer 3.5 (including) 3.5 (including)
Osirix Osirix-viewer 3.6 (including) 3.6 (including)
Osirix Osirix-viewer 3.7.1 (including) 3.7.1 (including)
Osirix Osirix-viewer 3.8.1 (including) 3.8.1 (including)
Osirix Osirix-viewer 3.9.4 (including) 3.9.4 (including)
Osirix Osirix-viewer 4.0 (including) 4.0 (including)
Osirix Osirix-viewer 4.1.2 (including) 4.1.2 (including)
Osirix Osirix-viewer 5.0.2 (including) 5.0.2 (including)
Osirix Osirix-viewer 5.5.2 (including) 5.5.2 (including)
Osirix Osirix-viewer 5.6 (including) 5.6 (including)

References