CVEvulnerability

CVE-2001-1436

4.6 MEDIUM Published 2001-01-18 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-01-18
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.

Affected configurations

• dallas semiconductor ibutton ds1991

References

http://www.atstake.com/research/advisories/2001/a011801-1.txt Exploit, Vendor Advisory
http://www.kb.cert.org/vuls/id/178560 Exploit, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/10625 exchange.xforce.ibmcloud.com
http://www.atstake.com/research/advisories/2001/a011801-1.txt Exploit, Vendor Advisory
http://www.kb.cert.org/vuls/id/178560 Exploit, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/10625 exchange.xforce.ibmcloud.com