4.6med
CVE-2000-10081 exploit
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to…
Published 25 y ago · modified 44 d ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 46%
Public exploits
1
Exploit-DB
Summary
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Exploit prediction (EPSS)
0.54% probability of exploitation in the next 30 days, higher than 46% of all scored CVEs.
Exploits and detections
- EDB-20241 Palm OS 3.5.2 - Weak Encryption · local · 2000-09-26
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- securityfocus.com /bid/1715 · vdb-entry, x_refsource_BID, x_transferred
- atstake.com /research/advisories/2000/a092600-1.txt · vendor-advisory, x_refsource_ATSTAKE, x_transferred
Sources
- CVE List: CVE-2000-1008
- NVD: CVE-2000-1008
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.