VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 1, 2002· Updated Jun 16, 2026

CVE-2002-1446

CVE-2002-1446

Description

The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages.

Affected products

2
  • Ncipher/Pkcs 11 Library2 versions
    cpe:2.3:a:ncipher:pkcs_11_library:1.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ncipher:pkcs_11_library:1.2.0:*:*:*:*:*:*:*
    • (no CPE)range: >=1.2.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.