CVE-2001-1436

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.atstake.com/research/advisories/2001/a011801-1.txtExploit, Vendor Advisory
http://www.kb.cert.org/vuls/id/178560Exploit, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/10625
http://www.atstake.com/research/advisories/2001/a011801-1.txtExploit, Vendor Advisory
http://www.kb.cert.org/vuls/id/178560Exploit, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/10625

Timeline

Published: Jan 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14377.5easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message CVE-2001-14385.0Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS CVE-2001-14392.1Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to caus CVE-2001-144010.0Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the syste CVE-2001-14416.8Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clien CVE-2001-14424.6Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c c CVE-2001-14435.0KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encrypti CVE-2001-14447.5The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption opt CVE-2001-14457.5Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via cr CVE-2001-14467.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote a CVE-2001-14477.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent item CVE-2001-14484.6Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symli