PT-2002-1206 · Apple · Palm Desktop

Published 2002-03-25 · Updated 2008-09-11 · CVE-2002-0120

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Palm Desktop version 4.0b76 Apple Palm Desktop version 4.0b77

Description The issue allows a local user to obtain sensitive information due to the creation of world-readable backup files and folders when a hotsync is performed.

Recommendations For Apple Palm Desktop version 4.0b76, consider restricting access to the backup files and folders to minimize the risk of sensitive information disclosure. For Apple Palm Desktop version 4.0b77, consider restricting access to the backup files and folders to minimize the risk of sensitive information disclosure.

Fix

Related Identifiers

CVE-2002-0120

Affected Products

Palm Desktop

References · 4

• http://iss.net/security_center/static/7937.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/250093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0120 · Security Note
• http://securityfocus.com/bid/3863 · Note