low2.1Public exploit code
CVE-2000-0275
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (2)2000-04-10 · local · windows · Verified
- CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (1)2000-04-10 · local · linux · Verified
Impact
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cryptocard | Cryptoadmin | Version 4.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html
- http://www.l0pht.com/advisories/cc-pinextract.txt
- http://www.securityfocus.com/bid/1097
- http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html
- http://www.l0pht.com/advisories/cc-pinextract.txt
- http://www.securityfocus.com/bid/1097