low1.9
CVE-2013-4425
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded pas…
Impact
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osirix-Viewer | Osirix | through 5.7 Versions 0.2, 1.0, 1.1, 1.1.2, 1.2 |
| Osirix-Viewer | Osirix Md | through 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-11/0029.html
- http://osvdb.org/99518
- http://www.securityfocus.com/bid/63566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88606
- http://archives.neohapsis.com/archives/bugtraq/2013-11/0029.html
- http://osvdb.org/99518
- http://www.securityfocus.com/bid/63566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88606