CVE-2001-0081 | BDVDB-2026-2304 Detail

Description#

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
http://active.ncipher.com/updates/advisory.txt
http://www.osvdb.org/4849

Exploit#

No public exploit known

History#

Version 12001-05-07Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.