CVE-2006-3896

The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.

🔗 References (10)

• cret@certhttp://secunia.com/advisories/23430
• cret@certhttp://securitytracker.com/id?1017396
• cret@certhttp://www.kb.cert.org/vuls/id/339004
• cret@certhttp://www.securityfocus.com/bid/21652
• cret@certhttp://www.vupen.com/english/advisories/2006/5063
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/23430
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017396
• af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/339004
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/21652
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/5063