What’s Vulnerable › Vulnerabilities

CVE-2002-0941

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-10-04 · updated 2026-06-16

Description

The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.

Affected products

• Ncipher Nforce: all versions
• Ncipher Nshield: all versions

References

• http://archives.neohapsis.com/archives/bugtraq/2002-06/0172.html
• http://www.iss.net/security_center/static/9354.php
• http://www.securityfocus.com/bid/5024
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0172.html
• http://www.iss.net/security_center/static/9354.php
• http://www.securityfocus.com/bid/5024

Get alerted when CVE-2002-0941 or the next vulnerability affects your stack