CVE-2002-1975

The CVE-2002-1975 entry applies to Sharp Zaurus PDA models SL-5000D and SL-5500. The vulnerability arises from using a fixed salt value "A0" to encrypt the screen-locking password stored in Security.conf, which enables local attackers to more easily brute-force the password. Reported details from...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2002-1975: Inadequate Encryption Strength

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...

CVE-2002-1974: Undefined Security Weakness

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0356

CVE-2004-0356: A stack-based buffer overflow in the Supervisor Report Center of SL Mail Pro 2.0.9 and earlier allows remote code execution via an HTTP request containing a long HTTP sub-version. Affects SL Mail Pro up to version 2.0.9; exploitation details are not provided in the connected docume...

CVE-2004-0356: Undefined Security Weakness

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0357

SL Mail Pro 2.0.9 is affected by stack-based buffer overflows exploitable via (1) user.dll, (2) loadpageadmin.dll, or (3) loadpageuser.dll, potentially allowing remote code execution. A patch is available (SL Mail Patch 2.0.14) to mitigate. The connected documents confirm the affected components ...

CVE-2004-0357: Undefined Security Weakness

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

PT-2002-2696 · Sharp · Sharp Zaurus Pda

Name of the Vulnerable Software and Affected Versions: Sharp Zaurus PDA versions SL-5000D and SL-5500 Description: The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to gues...