[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1734-1 opensc -- programming error

ID: oval:org.secpod.oval:def:600272Date: (C)2011-05-13   (M)2022-10-10
Class: PATCHFamily: unix




b.badrignans discovered that OpenSC, a set of smart card utilities, could stores private data on a smart card without proper access restrictions. Only blank cards initialised with OpenSC are affected by this problem. This update only improves creating new private data objects, but cards already initialised with such private data objects need to be modified to repair the access control conditions on such cards. For the stable distribution , this problem has been fixed in version 0.11.4-5+lenny1. For the unstable distribution , this problem wil be fixed soon. We recommend that you upgrade your opensc package and recreate any private data objects stored on your smart cards.

Platform:
Debian 5.0
Product:
opensc
Reference:
DSA-1734-1
CVE-2009-0368
CVE    1
CVE-2009-0368
CPE    1
cpe:/o:debian:debian_linux:5.x

© SecPod Technologies