CVE-2008-3972
First published: Wed Sep 10 2008(Updated: )
pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opensc-project Opensc | <=0.11.5 | |
| Opensc-project Opensc | =0.4.0 | |
| Opensc-project Opensc | =0.5.0 | |
| Opensc-project Opensc | =0.6.0 | |
| Opensc-project Opensc | =0.6.1 | |
| Opensc-project Opensc | =0.7.0 | |
| Opensc-project Opensc | =0.8.0 | |
| Opensc-project Opensc | =0.8.1 | |
| Opensc-project Opensc | =0.9.2 | |
| Opensc-project Opensc | =0.9.3 | |
| Opensc-project Opensc | =0.9.4 | |
| Opensc-project Opensc | =0.9.5 | |
| Opensc-project Opensc | =0.9.6 | |
| Opensc-project Opensc | =0.10.0 | |
| Opensc-project Opensc | =0.10.1 | |
| Opensc-project Opensc | =0.11.0 | |
| Opensc-project Opensc | =0.11.1 | |
| Opensc-project Opensc | =0.11.2 | |
| Opensc-project Opensc | =0.11.3 | |
| Opensc-project Opensc | =0.11.3-pre3 | |
| Opensc-project Opensc | =0.11.4 | |
| Siemens CardOS | =m4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2008/09/09/14
- http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html
- http://secunia.com/advisories/32099
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html
- http://secunia.com/advisories/34362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45045
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/opensc-project
- canonical/opensc-project opensc
- version/opensc-project opensc/0.11.5
- version/opensc-project opensc/0.4.0
- version/opensc-project opensc/0.5.0
- version/opensc-project opensc/0.6.0
- version/opensc-project opensc/0.6.1
- version/opensc-project opensc/0.7.0
- version/opensc-project opensc/0.8.0
- version/opensc-project opensc/0.8.1
- version/opensc-project opensc/0.9.2
- version/opensc-project opensc/0.9.3
- version/opensc-project opensc/0.9.4
- version/opensc-project opensc/0.9.5
- version/opensc-project opensc/0.9.6
- version/opensc-project opensc/0.10.0
- version/opensc-project opensc/0.10.1
- version/opensc-project opensc/0.11.0
- version/opensc-project opensc/0.11.1
- version/opensc-project opensc/0.11.2
- version/opensc-project opensc/0.11.3
- version/opensc-project opensc/0.11.3-pre3
- version/opensc-project opensc/0.11.4
- vendor/siemens
- canonical/siemens cardos
- version/siemens cardos/m4