CVE-2009-0368
23Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 1.2%
da publicação à arma0 dias
Publicada no NVD2 de mar.
1ª PoC26 de fev.
probabilidade de exploração
1.2%top 34% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32820⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttp://openwall.com/lists/oss-security/2009/02/26/1http://secunia.com/advisories/34052http://secunia.com/advisories/34120http://secunia.com/advisories/34362http://secunia.com/advisories/34377http://secunia.com/advisories/35065http://secunia.com/advisories/36074http://security.gentoo.org/glsa/glsa-200908-01.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/48958https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html