CVE-2002-2122

Pointsec for PalmOS (before 1.2) stores a user PIN in plaintext in memory. This enables a local attacker who steals an unlocked Palm to retrieve the PIN via memory dump. The available connected documents confirm the product (Pointsec for PalmOS), the vulnerable behavior (plaintext PIN in memory),...