38201 – openhbci-plugin-ddvcard can destroy hbci-cards

Bug 38201 - openhbci-plugin-ddvcard can destroy hbci-cards

Summary: openhbci-plugin-ddvcard can destroy hbci-cards

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All All

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://sourceforge.net/mailarchive/fo...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2004-01-14 12:15 UTC by Hanno Böck
Modified:	2011-10-30 22:37 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Hanno Böck gentoo-dev

2004-01-14 12:15:29 UTC

http://sourceforge.net/mailarchive/forum.php?thread_id=3743892&forum_id=926
describes the problem (only in german).

In short: Using openhbci with specific applications, e.g. gnucash, and a ddvcard can destroy the card after entering the pin wrong one time.

I've updated the ebuild, but we need a GLSA for it.

(It's only openhbci-plugin-ddvcard. There is also an update for openhbci, but that's not needed to fix the issue)

Comment 1 solar (RETIRED) gentoo-dev

2004-01-14 12:23:06 UTC

Hanno,
Sourceforge is not showing me details right now for this url.
Can you paste in some more info. 
And are you willing to help muster up most of this GLSA? 
I'm sure rajiv would be happy to work with you on this.

Comment 2 Kurt Lieber (RETIRED) gentoo-dev

2004-04-06 08:45:11 UTC

no response from submitter.  closing as invalid.