44 matches found
CVE-2003-0293
CVE-2003-0293 (PalmOS) : PalmOS devices are described as vulnerable to a denial-of-service caused by a flood of ICMP echo requests (ping), which can lead to CPU consumption or device unresponsiveness. The available public description attributes the impact to the OS handling of ICMP traffic, but t...
CVE-2003-0293
PalmOS allows remote attackers to cause a denial of service CPU consumption via a flood of ICMP echo request ping packets...
PalmOS ICMP flood DoS.
-BACKGROUND-: PalmOS is vulnerable to an ICMP DoS attack, when an attacker continuously sends ICMPECHO packets to the device. This attack causes 100 CPU usage, and the device therefore comes to a total lockup. The Pilot is almost instantly rendered unusable, until the attacker stops sending...
PalmOS 34 - ICMP Flood Remote Denial of Service
PalmOS 34 - ICMP Flood Remote Denial of Service // source: https://www.securityfocus.com/bid/7597/info A problem with PalmOS may result in a denial of service. It has been reported that PalmOS becomes unstable when flooded with ICMP ECHOREQUEST traffic. A remote attacker can trigger a device lock...
PalmOS 3/4 - ICMP Flood Remote Denial of Service
// source: https://www.securityfocus.com/bid/7597/info A problem with PalmOS may result in a denial of service. It has been reported that PalmOS becomes unstable when flooded with ICMP ECHOREQUEST traffic. A remote attacker can trigger a device lockup condition or cause the Palm OS device to loos...
CVE-2002-2122
Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory...
PalmOS crashes receiving SMS images using Handspring VisorPhone
Hello, A friend and I were playing around sending SMS messages the other day between a Nokia 3390 and his Handspring VisorPhone/Visor Prism combo. Sending text messages seemed to work just fine. However, on the Nokia, there is an option of sending SMS images. Apparently, they are fairly large as...
DoS против PalmOS через SMS
Определенный тип SMS-сообщений приводит к повреждению базы данных контактов...
CVE-2001-1438
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service PalmOS crash and VisorPhone database corruption by sending a large or crafted SMS image...
CVE-2001-0597
Zetetic Secure Tool for Recalling Important Passwords STRIP 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly...
CVE-2001-0597
The CVE-2001-0597 entry concerns Zetetic Secure Tool for Recalling Important Passwords (STRIP) for PalmOS (0.5 and earlier). The vulnerability arises from STRIP using SysRandom seeded by TimeGetTicks, coupled with an implementation flaw that greatly reduces the password search space, enabling a l...
Strip Password Generator 0.30.40.5 - Limited Password-Space
Strip Password Generator 0.30.40.5 - Limited Password-Space // source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem...
Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space
// source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem with Strip makes it possible for a user that has attained a...
CVE-2001-0067
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...
CVE-2001-0067
CVE-2001-0067 concerns the jpilot program, which creates a .jpilot directory in the user’s home with world-writable permissions (777). This insecure default enables local attackers to read other users’ PalmOS backups if umasks are not strictly set. Root cause is directory creation with permissive...
CVE-2001-0067
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...
@stake Advisory: PalmOS Password Retrieval and Decoding (A092600-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: PalmOS Password Retrieval and Decoding A092600-1 Release Date: 09/26/2000 Application: PalmOS 3.5.2 and below Platform: All PalmOS Platform Devices Severity: Moderate. Passwords can easily ...
Проблема в PalmOS
При синхронизации паролей они кодируются восстанавливаемым образом...
J-Pilot Permissions Vulnerability
J-Pilot automatically creates a ".jpilot" directory in the user's home directory to store preferences and backed up PalmOS device data. The permissions for this directory are mode 755, and files in the directory are mode 644; this allows anyone with only minimal access to the user's home director...