PT-2002-1949 · Ncipher · Ncipher Mscapi Csp

Published 2002-08-31 · Updated 2008-09-10 · CVE-2002-0940

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: nCipher MSCAPI CSP versions 5.50 through 5.54

Description: The issue concerns the domesticinstall.exe component, which fails to utilize Operator Card Set protected keys as requested by the user when the Operator Card Set is not generated. This results in a lower protection level than specified, providing only module protection.

Recommendations: For nCipher MSCAPI CSP versions 5.50 through 5.54, consider disabling the use of domesticinstall.exe until a proper fix is implemented to ensure the use of Operator Card Set protected keys as intended.

Fix

Related Identifiers

CVE-2002-0940

Affected Products

Ncipher Mscapi Csp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0940 · Security Note
• http://securityfocus.com/bid/4729 · Note
• http://online.securityfocus.com/archive/1/277241 · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html · Note