nCipher swinit漏洞

https://www.securityfocus.com/bid/88480
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200102-066

nCipher的swinit不能正确禁用OperatorCardSet恢复特征即使在用户明确的禁用时。攻击者提升访问权限到应用程序键。

nCipher Ncipher 0

来源:BUGTRAQ
名称:20001212nCipherSecurityAdvisory:OperatorCardsunexpectedlyrecoverable
链接:http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
来源:active.ncipher.com
链接:http://active.ncipher.com/updates/advisory.txt
来源:active.ncipher.com
链接:http://active.ncipher.com/updates/advisory.txt
来源:XF
名称:ncipher-recover-operator-cards(5999)
链接:http://xforce.iss.net/static/5999.php
来源:OSVDB
名称:4849
链接:http://www.osvdb.org/4849