CVE-2003-0406

Published: Jun 30, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.

Affected (1)

Products: Palmvnc: Palmvnc

Palmvnc

1 product

Palmvnc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Palmvnc Palmvnc	Version 1.40

References (6)

http://marc.info/?l=bugtraq&m=105405691423389&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/12083.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/7696

Source: cve@mitre.org

Vendor Advisory

http://marc.info/?l=bugtraq&m=105405691423389&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/12083.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/7696

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.