CVE Feed

    Dashboard / CVE / CVE-2009-0368

    CVE-2009-0368

    OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.

    Published:Mar 2, 2009
    Last Modified:Apr 23, 2026
    EPS:Mar 2, 2009
    EPSS Score:0.00384
    CVSS Score:2.1

    Affected Products

    Vendor
    Opensc-project
    Product
    Opensc

    Exploits

    http://www.securityfocus.com/bid/33922http://www.securityfocus.com/bid/33922https://www.exploit-db.com/exploits/32820

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
    http://openwall.com/lists/oss-security/2009/02/26/1
    http://secunia.com/advisories/34052
    http://secunia.com/advisories/34120
    http://secunia.com/advisories/34362
    http://secunia.com/advisories/34377
    http://secunia.com/advisories/35065
    http://secunia.com/advisories/36074
    http://security.gentoo.org/glsa/glsa-200908-01.xml
    http://www.debian.org/security/2009/dsa-1734
    http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html
    http://www.securityfocus.com/bid/33922
    https://exchange.xforce.ibmcloud.com/vulnerabilities/48958
    https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html
    https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html
    http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
    http://openwall.com/lists/oss-security/2009/02/26/1
    http://secunia.com/advisories/34052
    http://secunia.com/advisories/34120
    http://secunia.com/advisories/34362
    http://secunia.com/advisories/34377
    http://secunia.com/advisories/35065
    http://secunia.com/advisories/36074
    http://security.gentoo.org/glsa/glsa-200908-01.xml
    http://www.debian.org/security/2009/dsa-1734
    http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html
    http://www.securityfocus.com/bid/33922
    https://exchange.xforce.ibmcloud.com/vulnerabilities/48958
    https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html
    https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High