PT-2002-1206 · Apple · Palm Desktop

Publicado 2002-03-25 · Atualizado 2008-09-11 · CVE-2002-0120

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Palm Desktop version 4.0b76 Apple Palm Desktop version 4.0b77

Description The issue allows a local user to obtain sensitive information due to the creation of world-readable backup files and folders when a hotsync is performed.

Recommendations For Apple Palm Desktop version 4.0b76, consider restricting access to the backup files and folders to minimize the risk of sensitive information disclosure. For Apple Palm Desktop version 4.0b77, consider restricting access to the backup files and folders to minimize the risk of sensitive information disclosure.

Correção

Identificadores relacionados

CVE-2002-0120

Produtos afetados

Palm Desktop

Referências · 4

• http://securityfocus.com/bid/3863 · Nota
• http://iss.net/security_center/static/7937.php · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/250093 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0120 · Nota de Segurança