CVE-2003-0406

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=105405691423389&w=2
http://www.iss.net/security_center/static/12083.php	Vendor Advisory
http://www.securityfocus.com/bid/7696	Vendor Advisory
http://marc.info/?l=bugtraq&m=105405691423389&w=2
http://www.iss.net/security_center/static/12083.php	Vendor Advisory
http://www.securityfocus.com/bid/7696	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:palmvnc:palmvnc:1.40:*:*:*:*:*:*:*

History

20 Nov 2024, 23:44

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=105405691423389&w=2 -~~	() http://marc.info/?l=bugtraq&m=105405691423389&w=2 -
References	~~() http://www.iss.net/security_center/static/12083.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/12083.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/7696 - Vendor Advisory~~	() http://www.securityfocus.com/bid/7696 - Vendor Advisory

Information

Published : 2003-06-30 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2003-0406

Mitre link : CVE-2003-0406

CVE.ORG link : CVE-2003-0406

JSON object : View

Products Affected

palmvnc

palmvnc

CWE

NVD-CWE-Other

{"id": "CVE-2003-0406", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-06-30T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=105405691423389&w=2", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/12083.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/7696", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=105405691423389&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/12083.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/7696", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges."}, {"lang": "es", "value": "PalmVNC 1.40 y anteriores almacenancontrase\u00f1as en texto plano en la PalmVNCDB, de la que se hace copia de seguridad en los PC's con los que se sincroniza la Palm, lo que podr\u00eda permitir a atacantes ganar privilegios."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:palmvnc:palmvnc:1.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6141B3C8-DD24-4706-8674-0E126180EF0D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

7.2 /10