CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2000-12-11

Last modified

2024-08-08

Affected products

• Palm Os (Palm)

References

• http://www.atstake.com/research/advisories/2000/a092600-1.txt
• http://www.securityfocus.com/bid/1715