PT-2002-2842 · Check Point · Pointsec

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2122

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Pointsec versions prior to 1.2 for PalmOS

Description: The issue allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory, as the PIN number is stored in memory in plaintext.

Recommendations: For versions prior to 1.2, consider changing the PIN and ensuring the device is locked when not in use to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-2122

Produtos afetados

Pointsec

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2002-05/0035.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-2122 · Nota de Segurança
• http://securityfocus.com/bid/4681 · Correção
• http://iss.net/security_center/static/9021.php · Correção