SuSE 11.2 Security Update : openCryptoki (SAT Patch Number 7053)

Medium Nessus Plugin ID 64210


The remote SuSE 11 host is missing one or more security updates.


openCryptoki had insecure lock file handling, which might have allowed local users with pkcs11 privileges to look at other local users pkcs11 credentials.

Some additional small fixes in pkcsslotd were fixed :

- Set pkcsslotd pid to /var/run/

- Removed spurious '-' before no-header option on ps

- Sending output of pkcs11_startup to syslog via logger


Apply SAT patch number 7053.

See Also

Plugin Details

Severity: Medium

ID: 64210

File Name: suse_11_openCryptoki-121115.nasl

Version: $Revision: 1.2 $

Type: local

Agent: unix

Published: 2013/01/25

Modified: 2013/10/25

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 6.2

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:openCryptoki, p-cpe:/a:novell:suse_linux:11:openCryptoki-32bit, p-cpe:/a:novell:suse_linux:11:openCryptoki-64bit, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 2012/11/15

Reference Information

CVE: CVE-2012-4454, CVE-2012-4455