CVE-2000-1008

CVE-2000-1008

Medium · published December 11, 2000

CVSS v2.0
4.6
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

The record
Technical detail
CVSS v2.0
4.6 · MEDIUM
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.4th percentile
Published
2000-12-11T10:00Z
Affected products (1)
ProductVersionsFixed in
palm/palm_os≤ 3.5.2—
References (4)
http://www.atstake.com/research/advisories/2000/a092600-1.txt · [email protected]http://www.securityfocus.com/bid/1715 · [email protected]http://www.atstake.com/research/advisories/2000/a092600-1.txt · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/1715 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 NOV 05:00Z
    PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the…
    cvelistv5