CVE-2008-3972

{"id": "CVE-2008-3972", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 9.2, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-09-11T01:13:47.807", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32099", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34362", "source": "cve@mitre.org"}, {"url": "http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/09/09/14", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45045", "source": "cve@mitre.org"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/32099", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/34362", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2008/09/09/14", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45045", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the \"OpenSC\" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235."}, {"lang": "es", "value": "pkcs15-tool en OpenSC antes de 0.11.6 no aplica las actualizaciones de seguridad a una tarjeta inteligente a menos que la etiqueta de la tarjeta corresponda con la cadena \"OpenSC\", lo que podr\u00eda permitir a atacantes f\u00edsicamente pr\u00f3ximos explotar vulnerabilidades que el propietario de la tarjeta cre\u00eda que estaban parcheadas, como se demostr\u00f3 con la explotaci\u00f3n de CVE-2008-2235."}], "lastModified": "2024-11-21T00:50:36.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opensc-project:opensc:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C5385FB-359D-4A1D-9CC7-803536F497CE", "versionEndIncluding": "0.11.5"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "471DBF4E-54B8-4776-A0BA-0F65FE02192E"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BC7891E-1898-442A-96BB-5B8EE5A5B400"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA4321E6-1D08-489C-948F-2673C30D762C"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8498096A-19A9-4C09-99C3-CC1C45D6BA40"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5028CF13-2807-4813-A542-A1CD6E735CC5"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE75F1ED-E653-482C-B960-42DA2854E974"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "931CE287-97AF-4B73-BA57-FB9B9AAA7016"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04701B8B-523A-4148-805C-419336D91CA2"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2194636B-7F74-4EC2-A02F-CE0F29914D76"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1D617E6-4EEC-4024-92D7-930F9A90F6DF"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "428986EC-328E-49F8-AAE7-EECD97F6B6FC"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A64E85D-B1A7-48FB-8438-8173249ED817"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13234C4B-7598-46B1-A8F0-7C0C863DE4C5"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFC7C1A0-83AA-4989-A023-0B22B95133B9"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B093D7C9-242E-4CC7-9971-71D9AE19A7F7"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "353AFA23-88C0-45AA-B9EF-EF7A4DC6AFE3"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA2024C5-238A-4734-B8C6-D4F99EEFBC07"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF611D89-FA24-4421-A8A8-5290629C81D1"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.3:pre3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ECCFF79-6515-42F8-B986-4C06BE1F79D6"}, {"criteria": "cpe:2.3:a:opensc-project:opensc:0.11.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A74B19CB-8AFB-4A07-9A84-063BFF47E089"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:cardos:m4:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FEF8B710-EAF0-4381-B1C5-B2EAA91737DE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Direct Patch Link - http://www.opensc-project.org/files/opensc/opensc-0.11.6.tar.gz"}