PT-2002-2842 · Check Point · Pointsec

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2122

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Pointsec versions prior to 1.2 for PalmOS

Description: The issue allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory, as the PIN number is stored in memory in plaintext.

Recommendations: For versions prior to 1.2, consider changing the PIN and ensuring the device is locked when not in use to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-2122

Affected Products

Pointsec

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2002-05/0035.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2122 · Security Note
• http://securityfocus.com/bid/4681 · Patch
• http://iss.net/security_center/static/9021.php · Patch