CVE-2002-2122 Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.
LowCVSS 2.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pointsec mobile technologies pointsec | = 1.0 | No fix listed |
References
- 20020507 KPMG-2002018: Pointsec for PalmOS PIN disclosure mailing-list patch vendor-advisory
- pointsec-palmos-plaintext-pin(9021) patch vdb-entry
- 4681 patch vdb-entry