CVE-2002-0941 The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application th...
MediumCVSS 4.6
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncipher nforce | All versions | No fix listed |
| ncipher nshield | All versions | No fix listed |
References
- 20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windows mailing-list
- ncipher-consolecallback-passphrase-leak(9354) patch vdb-entry vendor-advisory
- 5024 patch vdb-entry vendor-advisory