Unscored severity · published Dec 11, 2000
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to…
–
CVSS
0.5%
EPSS
No
On KEV
Description
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Palm OS · Palm
through 3.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-1008
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-1008
Exploit
http://www.atstake.com/research/advisories/2000/a092600-1.txt
Exploit
http://www.securityfocus.com/bid/1715
More from Palm OS
–
CVE-2007-4213
Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device reset or hang) via a flood of large ICMP echo requests
–
CVE-2002-0116
Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g
–
CVE-2001-1438
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database…
–
CVE-2001-0157
Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even…