Vulnerability Description
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Palm | Palm Os | <= 3.5.2 |
References
- http://www.atstake.com/research/advisories/2000/a092600-1.txtExploitPatchVendor Advisory
- http://www.securityfocus.com/bid/1715ExploitPatchVendor Advisory
- http://www.atstake.com/research/advisories/2000/a092600-1.txtExploitPatchVendor Advisory
- http://www.securityfocus.com/bid/1715ExploitPatchVendor Advisory
FAQ
What is CVE-2000-1008?
CVE-2000-1008 is a vulnerability with a CVSS score of 4.6 (MEDIUM). PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
How severe is CVE-2000-1008?
CVE-2000-1008 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-1008?
Check the references section above for vendor advisories and patch information. Affected products include: Palm Palm Os.