What’s Vulnerable › Vulnerabilities

CVE-2000-1008

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-12-11 · updated 2026-09-23

Description

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

Affected products

• Palm Os: through 3.5.2

References

• http://www.atstake.com/research/advisories/2000/a092600-1.txt
• http://www.securityfocus.com/bid/1715
• http://www.atstake.com/research/advisories/2000/a092600-1.txt
• http://www.securityfocus.com/bid/1715

Get alerted when CVE-2000-1008 or the next vulnerability affects your stack