Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2002-0941

Overview

Vulnerability Score 4.6 4.6
CVE Id CVE-2002-0941
Last Modified 05 Sep 2008 04:29:21
Published 04 Oct 2002 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2002-0941

Summary

The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.

Vulnerable Systems

Application

  • Ncipher Nforce


References

BID - 5024

XF - ncipher-consolecallback-passphrase-leak(9354)

BUGTRAQ - 20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windows


Last Updated: 27 May 2016 10:37:08