CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.54% chance of exploitation in the next 30 days, 44th percentile

Published

2000-11-29

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20241

Security advisories

• http://www.atstake.com/research/advisories/2000/a092600-1.txt
• http://www.securityfocus.com/bid/1715

References

• CVE Record
• NVD entry