PT-2001-2155 · Starfish · Starfish Truesync Desktop

Published 2001-08-31 · Updated 2008-09-05 · CVE-2001-1006

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Starfish Truesync Desktop version 2.0b

Description The issue concerns the lack of encryption for sensitive files in the software, which relies solely on a password feature for access restriction. This allows an attacker to read the sensitive files using a different application, bypassing the password protection.

Recommendations For version 2.0b, consider implementing additional security measures such as encryption for sensitive files to prevent unauthorized access. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1006

Affected Products

Starfish Truesync Desktop

References · 3

• http://securityfocus.com/bid/3232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1006 · Security Note
• http://securityfocus.com/archive/1/210067 · Vendor Advisory