CVE
- Id
- 3809
- CVE No.
- CVE-2001-1005
- Status
- Candidate
- Description
- Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
- Phase
- Proposed (20020131)
- Votes
- ACCEPT(1) Green | MODIFY(1) Frech | NOOP(4) Armstrong, Cole, Foat, Wall
- Comments
- Frech> XF:truesync-desktop-insecure-passwords(7031)