CVE-2000-1008

Published: Dec 11, 2000Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

Affected (1)

Products: Palm: Palm Os

Palm

1 product

Palm Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Palm Palm Os	Up to 3.5.2

References (4)

http://www.atstake.com/research/advisories/2000/a092600-1.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1715

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.atstake.com/research/advisories/2000/a092600-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1715

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.