Description
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
References
- ncipher-consolecallback-passphrase-leak(9354) vdb-entry
- 20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windows mailing-list
- 5024 vdb-entry