CVE-2009-0368
EPSS 0.38%opensc - information disclosure
發布日:2009/3/2修改日:2026/4/28
描述
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.
受影響套件(2)
- Debian/openscfrom 0, < 0.11.7-1
- Debian/openscfrom 0, < 0.11.4-5+lenny1