CVE-2010-0221 Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host....
LowCVSS 2.1
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kingston datatraveler blackbox | All versions | No fix listed |
| kingston datatraveler elite | All versions | No fix listed |
| kingston datatraveler secure | All versions | No fix listed |
References
- blogs.zdnet.com
- it.slashdot.org
- news.zdnet.co.uk
- 1023410 vdb-entry
- www.h-online.com
- www.kingston.com exploit
- www.syss.de
- www.syss.de
- ADV-2010-0080 vdb-entry vendor-advisory
- kingston-access-control-sec-bypass(55477) vdb-entry
- www.ironkey.com