PT-2002-1949 · Ncipher · Ncipher Mscapi Csp

Publicado 2002-08-31 · Atualizado 2008-09-10 · CVE-2002-0940

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: nCipher MSCAPI CSP versions 5.50 through 5.54

Description: The issue concerns the domesticinstall.exe component, which fails to utilize Operator Card Set protected keys as requested by the user when the Operator Card Set is not generated. This results in a lower protection level than specified, providing only module protection.

Recommendations: For nCipher MSCAPI CSP versions 5.50 through 5.54, consider disabling the use of domesticinstall.exe until a proper fix is implemented to ensure the use of Operator Card Set protected keys as intended.

Correção

Identificadores relacionados

CVE-2002-0940

Produtos afetados

Ncipher Mscapi Csp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0940 · Nota de Segurança
• http://securityfocus.com/bid/4729 · Nota
• http://online.securityfocus.com/archive/1/277241 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html · Nota