CVE-2002-1975 Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via br...
MediumCVSS 5.5
EPSS 0.24%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sharp zaurus sl-5000d firmware | All versions | No fix listed |
| sharp zaurus sl-5500 firmware | All versions | No fix listed |
References
- 20020710 Multiple Security Vulnerabilities in Sharp Zaurus broken-link mailing-list third-party-advisory vdb-entry
- zaurus-passcode-weak-encryption(9535) broken-link vdb-entry
- 5201 broken-link third-party-advisory vdb-entry