CVEvulnerability

CVE-2001-0597

7.2 HIGH Published 2001-08-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-08-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.

Affected configurations

• zetetic enterprises strip (<= 0.5) • zetetic enterprises strip 0.3 • zetetic enterprises strip 0.4

References