CVE-2002-0940

Published: Oct 4, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).

Affected (2)

Products: Ncipher: Mscapi Csp

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ncipher Mscapi Csp	Version 5.50
Ncipher Mscapi Csp	Version 5.54

References (6)

http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/277241

Source: cve@mitre.org

http://www.securityfocus.com/bid/4729

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.securityfocus.com/archive/1/277241

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4729

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.