A security issue and some vulnerabilities have been reported in PCSC-Lite, which can potentially be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges.

1) The security issue is caused due to pcscd creating the directory "/var/run/pcscd.events/" with insecure permissions, which can e.g. be exploited to cause a DoS.

2) Various boundary errors within the "MSGFunctionDemarshall()" function in src/winscard_svc.c can be exploited by malicious pcscd clients to cause a buffer overflow and potentially execute arbitrary code with escalated privileges.

Solution
Update to version 1.5.4.

Provided and/or discovered by
1) Reported by Tomas Mraz in a Red Hat bug report.
2) Sebastian Krahmer, SUSE

Changelog
Further details available to Secunia VIM customers

Original Advisory
Red Hat:
https://bugzilla.redhat.com/show_bug.cgi?id=503211

PCSC-Lite:
http://svn.debian.org/viewsvn/pcsclite/trunk/PCSC/ChangeLog?r1=3470&r2=4272
1) http://svn.debian.org/viewsvn/pcsclite?view=rev&revision=4237
2) http://svn.debian.org/viewsvn/pcsclite?view=rev&revision=4208

Deep Links
Links available to Secunia VIM customers