CVE-2001-1436

Published: Jan 18, 2001Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.

Affected (1)

Products: Dallas Semiconductor: Ibutton

Dallas Semiconductor

1 product

Ibutton

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dallas Semiconductor Ibutton	Version ds1991

References (6)

http://www.atstake.com/research/advisories/2001/a011801-1.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.kb.cert.org/vuls/id/178560

Source: cve@mitre.org

ExploitThird Party AdvisoryUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/10625

Source: cve@mitre.org

http://www.atstake.com/research/advisories/2001/a011801-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.kb.cert.org/vuls/id/178560

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/10625

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.