nCipher Support Software Key Import Temporary File Cleanup Vulnerability
BID:6927
Info
nCipher Support Software Key Import Temporary File Cleanup Vulnerability
| Bugtraq ID: | 6927 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 24 2003 12:00AM |
| Updated: | Feb 24 2003 12:00AM |
| Credit: | Vulnerability announced by nCipher. |
| Vulnerable: |
nCipher Support Software 6.0 |
| Not Vulnerable: |
nCipher Support Software 7.0 |
Discussion
nCipher Support Software Key Import Temporary File Cleanup Vulnerability
It has been reported that nCipher Support Software does not properly handle some temporary files. Due to insecure management and removal of files when a software-based key is imported using the Support Software, an attacker may be able to gain access to key information after the software has been used.
It has been reported that nCipher Support Software does not properly handle some temporary files. Due to insecure management and removal of files when a software-based key is imported using the Support Software, an attacker may be able to gain access to key information after the software has been used.
Exploit / POC
nCipher Support Software Key Import Temporary File Cleanup Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.
Solution / Fix
nCipher Support Software Key Import Temporary File Cleanup Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
nCipher Support Software Key Import Temporary File Cleanup Vulnerability
References:
References: