1. CVE-Search
  2. CVE-2009-1603
ID CVE-2009-1603
Summary src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.
References
Vulnerable Configurations
  • cpe:2.3:a:opensc-project:opensc:0.11.7:*:*:*:*:*:*:*
    cpe:2.3:a:opensc-project:opensc:0.11.7:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 14-02-2024 - 15:19)
Impact:
Exploitability:
CWE CWE-312
CAPEC
  • Retrieve Embedded Sensitive Data
    An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:N/A:N
refmap via4
fedora
  • FEDORA-2009-4883
  • FEDORA-2009-4919
  • FEDORA-2009-4928
  • FEDORA-2009-4967
gentoo GLSA-200908-01
mandriva MDVSA-2009:123
mlist
  • [opensc-announce] 20090508 OpenSC 0.11.8 released with security update
  • [oss-security] 20090508 OpenSC 0.11.8 released with security update
secunia
  • 35035
  • 35293
  • 35309
  • 36074
vupen ADV-2009-1295
Last major update 14-02-2024 - 15:19
Published 11-05-2009 - 16:30
Last modified 14-02-2024 - 15:19
Back to Top