Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2235
HistoryAug 01, 2008 - 12:00 a.m.

CVE-2008-2235

2008-08-0100:00:00
ubuntu.com
ubuntu.com
15

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

EPSS

0.001

Percentile

23.6%

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information
of 00) for the 5015 directory on smart cards and USB crypto tokens running
Siemens CardOS M4, which allows physically proximate attackers to change
the PIN.

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

EPSS

0.001

Percentile

23.6%