CVE-2006-6286

Published: Dec 4, 2006Modified: Apr 23, 2026

1.7

Vector

AV:L/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 3.1 / Impact: 2.9

Source: NVD

Description

Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information (address books, calendar files, and todo lists of other users) via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected (3)

Products: Palm: Palm Desktop

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Palm Palm Desktop	Up to 4.1.4
Palm Palm Desktop	Version 4.0b76
Palm Palm Desktop	Version 4.0b77

References (8)

http://secunia.com/advisories/23072

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/21382/info

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4803

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30657

Source: cve@mitre.org

http://secunia.com/advisories/23072

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/21382/info

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4803

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30657

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.