CVE-2003-1417

Published: Dec 31, 2003Modified: Apr 16, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the (1) key.pem or (2) key.der files.

Affected (1)

Products: Ncipher: Support Software

Ncipher

1 product

Support Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ncipher Support Software	Version 6.00

Related CWEs

CWE-255

References (8)

http://marc.info/?l=bugtraq&m=104619088801750&w=2

Source: cve@mitre.org

http://www.ncipher.com/support/advisories/advisory7_keyduplicates.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/6927

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11422

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104619088801750&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ncipher.com/support/advisories/advisory7_keyduplicates.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6927

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11422

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.