Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

B.Badrignans

#53353de 53,633
2.1CVSS total
Vulnerabilidades · 1
PT-2009-1008
2.1
2009-03-02
Opensc · Opensc · CVE-2009-0368
**Name of the Vulnerable Software and Affected Versions** OpenSC versions prior to 0.11.8 OpenSC versions prior to 0.11.7 **Description** The issue affects the opensc package in Gentoo Linux and Debian GNU/Linux operating systems, potentially leading to a breach of protected information confidentiality. Exploitation can be performed remotely or by a local attacker. Specifically, it allows physically proximate attackers to bypass intended PIN requirements and read private data objects via low-level APDU commands or debugging tools. **Recommendations** For versions prior to 0.11.7, consider restricting access to debugging tools and low-level APDU commands to minimize the risk of exploitation. For versions prior to 0.11.8, update to version 0.11.8 or later to resolve the issue.