What’s Vulnerable › Vulnerabilities
CVE-2001-1005
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2001-08-31 · updated 2026-06-16
Description
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
Affected products
References
- http://www.securityfocus.com/archive/1/210067
- http://www.securityfocus.com/bid/3231
- http://www.securityfocus.com/archive/1/210067
- http://www.securityfocus.com/bid/3231
Get alerted when CVE-2001-1005 or the next vulnerability affects your stack