NetSight
IP …
high7.5

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public expon…

Impact

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.

Affected products

VendorProductAffected versions
Opensc-ProjectOpensc
Version 0.11.7
FedoraprojectFedora
Versions 9, 10, 11

Weakness classification

CWE-312

References