CVE-2000-0275

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html
http://www.l0pht.com/advisories/cc-pinextract.txtExploit, Vendor Advisory
http://www.securityfocus.com/bid/1097
http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html
http://www.l0pht.com/advisories/cc-pinextract.txtExploit, Vendor Advisory
http://www.securityfocus.com/bid/1097

Timeline

Published: Apr 10, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02762.1BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.CVE-2000-02777.2Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allo CVE-2000-02785.0The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, CVE-2000-02795.0BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.CVE-2000-02802.6Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Locat CVE-2000-02812.1Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.CVE-2000-02825.0TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on CVE-2000-02836.4The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.CVE-2000-02847.5Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other comman CVE-2000-02857.2Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.CVE-2000-02862.1X fontserver xfs allows local users to cause a denial of service via malformed input to the server.CVE-2000-028710.0The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter