CVE-2004-0320 Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands.
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncipher nshield | = 1.71.11 | No fix listed |
| ncipher nshield | = 1.71.15 | No fix listed |
| ncipher nshield | = 1.71.90 | No fix listed |
| ncipher nshield | = 1.75.15 | No fix listed |
| ncipher nshield | = 1.77.9 | No fix listed |
| ncipher nshield | = 1.77.93 | No fix listed |
| ncipher nshield | = 1.77.97 | No fix listed |
| ncipher nshield | = 1.79.12 | No fix listed |
| ncipher nshield | = 1.79.80 | No fix listed |
| ncipher nshield | = 1.79.81 | No fix listed |
| ncipher nshield | = 2.0 | No fix listed |
| ncipher nshield | = 2.0.4 | No fix listed |
| ncipher nshield | = 2.12 | No fix listed |
| ncipher nshield | = 2.12.2 | No fix listed |
References
- 20040223 nCipher Advisory #9: Host-side attackers can access secret data mailing-list
- 4055 vdb-entry
- 9717 vdb-entry vendor-advisory
- ncipher-hsm-obtain-info(15281) vdb-entry