漏洞信息详情
OpenSC CardOS M4 Smart Cards 不安全许可漏洞
漏洞简介
OpenSC是一款智能卡库和应用程序。 OpenSC不安全许可漏洞。 OpenSC 0.11.5之前的版本使用弱许可运行Siemens CardOS M4的卡片和USB加密标识上的5015目录,这使得攻击者可以更改PIN。
漏洞公告
目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接: http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html
参考网址
来源: BID 名称: 30473 链接:http://www.securityfocus.com/bid/30473 来源: FEDORA 名称: FEDORA-2009-2267 链接:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html 来源: XF 名称: opensc-smartcard-cryptotoken-weak-security(44140) 链接:http://xforce.iss.net/xforce/xfdb/44140 来源: www.opensc-project.org 链接:http://www.opensc-project.org/security.html 来源: MLIST 名称: [opensc-announce] 20080731 OpenSC Security Vulnerability and new Versions of OpenSC, OpenCT, LibP11, Pam_P11, Engine_PKCS11 链接:http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html 来源: MANDRIVA 名称: MDVSA-2008:183 链接:http://www.mandriva.com/security/advisories?name=MDVSA-2008:183 来源: GENTOO 名称: GLSA-200812-09 链接:http://security.gentoo.org/glsa/glsa-200812-09.xml 来源: SECUNIA 名称: 34362 链接:http://secunia.com/advisories/34362 来源: SECUNIA 名称: 33115 链接:http://secunia.com/advisories/33115 来源: SECUNIA 名称: 32099 链接:http://secunia.com/advisories/32099 来源: SECUNIA 名称: 31360 链接:http://secunia.com/advisories/31360 来源: SECUNIA 名称: 31330 链接:http://secunia.com/advisories/31330 来源: SUSE 名称: SUSE-SR:2009:004 链接:http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html 来源: SUSE 名称: SUSE-SR:2008:019 链接:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html 来源: DEBIAN 名称: DSA-1627 链接:http://lists.debian.org/debian-security-announce/2008/msg00212.html
受影响实体
- Siemens Cardos:M4<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...