CVE-2007-2023

CVE-2007-2023 documents an authentication bypass in the Secustick USB flash drive. USB20.dll decouples authorization and file access and allows local users to bypass authentication by altering the return value of VerifyPassWord, enabling unauthorized file access. Exploit/workaround details are no...