CVE

Id
3410  
CVE No.
CVE-2001-0597  
Status
Candidate  
Description
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP"s use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password "search space".  
Phase
Proposed (20010727)  
Votes
ACCEPT(3) Cole, Frech, Ziese | NOOP(2) Foat, Wall | REVIEWING(1) Bishop  
Comments
Frech> CONFIRM:http://www.zetetic.net/docs/bugs/security_04-09-2001. | html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14788 3410 CVE-2001-0597 BUGTRAQ:20010410 Catastrophic failure of Strip password generation.  View
14789 3410 CVE-2001-0597 URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html  View
14790 3410 CVE-2001-0597 BID:2567  View
14791 3410 CVE-2001-0597 URL:http://www.securityfocus.com/bid/2567  View
14792 3410 CVE-2001-0597 XF:strip-weak-passwords(6362)  View

Related JVN