Back to Database
Status published
Medium
CVE-2002-1446
The error checking routine used for the C_Verify call on...
Vulnerability Description
The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1446
Credits & Attribution
No credits recorded in the NVD database.
References
More from ncipher
View All →CVE-2006-1117
nCipher firmware before V10, as used by (1) nShield, (2)...
Low
2.6
CVE-2006-1116
The CBC-MAC integrity functions in the nCipher nCore API before...
Medium
5
CVE-2006-1115
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key...
Low
2.6
CVE-2004-0320
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through...
Low
2.1
CVE-2004-0063
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18...
High
7.5
Affected Vendor
ncipher
View all reports →Affected Software
pkcs 11 library
Vulnerable Versions:
1.2.0
Timeline
Official Publish:
September 1st, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.