7.2

CVE-2001-0597

Exploit
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack.  This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zetetic Enterprises ≫ Strip Version <= 0.5
Zetetic Enterprises ≫ Strip Version 0.3
Zetetic Enterprises ≫ Strip Version 0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.605
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html
Patch
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/2567
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/6362