CVE-2008-3972

2008-09-1100:00:00

ubuntu.com

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

EPSS

0.001

Percentile

26.7%

JSON

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a
smart card unless the card’s label matches the “OpenSC” string, which might
allow physically proximate attackers to exploit vulnerabilities that the
card owner expected were patched, as demonstrated by exploitation of
CVE-2008-2235.