PT-2000-1257 · Cryptocard · Cryptocard Cryptoadmin For Palmos

Published 2000-04-10 · Updated 2008-09-10 · CVE-2000-0275

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CRYPTOCard CryptoAdmin for PalmOS (affected versions not specified)

Description The issue concerns the use of weak encryption to store a user's PIN number in the CRYPTOCard CryptoAdmin for PalmOS. This weakness allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0275

Affected Products

Cryptocard Cryptoadmin For Palmos

References · 6

• 🔥 http://l0pht.com/advisories/cc-pinextract.txt · Exploit
• 🔥 https://exploit-db.com/exploits/19838 · Exploit
• 🔥 https://exploit-db.com/exploits/19839 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0275 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html · Note
• http://securityfocus.com/bid/1097 · Note