medium5.0
CVE-2001-0081
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to ga…
Impact
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncipher | Ncipher | All versions |
References
- NVD record
- CVE.org record
- http://active.ncipher.com/updates/advisory.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
- http://active.ncipher.com/updates/advisory.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999