CVE-2001-1005

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-08-31

Last modified

2024-08-08

Affected products

• Truesync Desktop (Starfish)

References

• http://www.securityfocus.com/archive/1/210067
• http://www.securityfocus.com/bid/3231