Unscored DSA-1627-2 2 CVEs

opensc - smart card vulnerability

Published Aug 4, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	opensc	0.11.1-2etch2

Vulnerabilities 2

Unscored —

CVE-2008-2235

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards…

opensc Debian

Aug 1, 2008
Unscored —

CVE-2008-3972

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the…

opensc Debian

Sep 10, 2008