Test ID:	1.3.6.1.4.1.25623.1.0.800370
Category:	Privilege escalation
Title:	OpenSC Security Bypass Vulnerability
Summary:	Check for the version of OpenSC
Description:	Overview: This host is installed with OpenSC and is prone to security bypass vulnerability. Vulnerability Insight: Security issue due to OpenSC incorrectly initializing private data objects. This can be exploited to access data objects which are intended to be private through low level APDU commands or debugging tool. Impact: Successful exploitation will allow attacker to access data objects which are intended to be private. Impact Level: Application Affected Software/OS: OpenSC version prior to 0.11.7 on Linux. Fix: Upgrade to OpenSC version 0.11.7 http://www.opensc-project.org/files/opensc References: http://secunia.com/advisories/34052 http://xforce.iss.net/xforce/xfdb/48958 http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html
Cross-Ref:	BugTraq ID: 33922 Common Vulnerability Exposure (CVE) ID: CVE-2009-0368 http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html http://openwall.com/lists/oss-security/2009/02/26/1 Debian Security Information: DSA-1734 (Google Search) http://www.debian.org/security/2009/dsa-1734 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html http://security.gentoo.org/glsa/glsa-200908-01.xml SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://www.securityfocus.com/bid/33922 http://secunia.com/advisories/34052 http://secunia.com/advisories/34362 http://secunia.com/advisories/34377 http://secunia.com/advisories/35065 http://secunia.com/advisories/36074 http://secunia.com/advisories/34120 XForce ISS Database: opensc-pkcs-unauth-access(48958) http://xforce.iss.net/xforce/xfdb/48958
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: