PT-2002-2696 · Sharp · Sharp Zaurus Pda

Published 2002-12-31 · Updated 2025-01-16 · CVE-2002-1975

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sharp Zaurus PDA versions SL-5000D and SL-5500

Description The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to guess the password via brute force methods.

Recommendations For Sharp Zaurus PDA versions SL-5000D and SL-5500, consider changing the screen-locking password to a stronger one and avoid using the default salt value to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2002-1975

Affected Products

Sharp Zaurus Pda

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1975 · Security Note
• http://securityfocus.com/bid/5201 · Note
• http://iss.net/security_center/static/9535.php · Note
• https://t.me/cvenotify/71371 · Telegram Post
• https://t.me/cvenotify/107688 · Telegram Post
• http://online.securityfocus.com/archive/1/281437 · Note