CVE-2009-0368

Published: Mar 2, 2009Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.

Affected (31)

Products: Opensc Project: Opensc

1 product

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Opensc Project Opensc	Up to 0.11.6
Opensc Project Opensc	Version 0.10.0
Opensc Project Opensc	Version 0.10.1
Opensc Project Opensc	Version 0.11.0
Opensc Project Opensc	Version 0.11.1
Opensc Project Opensc	Version 0.11.2
Opensc Project Opensc	Version 0.11.3
Opensc Project Opensc	Version 0.11.3 pre3
Opensc Project Opensc	Version 0.11.4
Opensc Project Opensc	Version 0.11.5
Opensc Project Opensc	Version 0.3.2
Opensc Project Opensc	Version 0.3.5
Opensc Project Opensc	Version 0.4.0
Opensc Project Opensc	Version 0.5.0
Opensc Project Opensc	Version 0.6.0
Opensc Project Opensc	Version 0.6.1
Opensc Project Opensc	Version 0.7.0
Opensc Project Opensc	Version 0.8.0.0
Opensc Project Opensc	Version 0.8.0
Opensc Project Opensc	Version 0.8.1
Opensc Project Opensc	Version 0.8
Opensc Project Opensc	Version 0.9.2
Opensc Project Opensc	Version 0.9.3
Opensc Project Opensc	Version 0.9.4
Opensc Project Opensc	Version 0.9.5
Opensc Project Opensc	Version 0.9.6
Opensc Project Opensc	Version 0.9.7
Opensc Project Opensc	Version 0.9.7 b
Opensc Project Opensc	Version 0.9.7 d
Opensc Project Opensc	Version 0.9.8
Opensc Project Opensc	Version 0.9

Related CWEs

References (30)

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2009/02/26/1

Source: cve@mitre.org

Patch

http://secunia.com/advisories/34052

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34120

Source: cve@mitre.org

http://secunia.com/advisories/34362

Source: cve@mitre.org

http://secunia.com/advisories/34377

Source: cve@mitre.org

http://secunia.com/advisories/35065

Source: cve@mitre.org

http://secunia.com/advisories/36074

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200908-01.xml

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1734

Source: cve@mitre.org

http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/33922

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/48958

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2009/02/26/1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/34052

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34120

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34362

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34377

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35065

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36074

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200908-01.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1734

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/33922

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/48958

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.