CVE-2000-0275 CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
LowCVSS 2.1
EPSS 0.86%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cryptocard cryptoadmin | = 4.1 | No fix listed |
References
- 20000410 CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion mailing-list
- 20000410 CRYPTOCard PalmToken PIN Extraction exploit vendor-advisory
- 1097 vdb-entry