CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers...
CVE-2000-1008 is a medium vulnerability (CVSS 4.6) in Palm Os, published November 29, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 46th percentile. No source names a fixed version.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 0.54%EPSS, 46th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Palm OS 3.5.2 - Weak Encryption | 2000-09-26 |
What each source reports
NVD Score used
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
- Record
CVE-2000-1008- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
- Record
CVE-2000-1008- Updated
- 2026-11-02
EUVDEUVD-2000-0995No score
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
- Record
EUVD-2000-0995- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v3w6-x84c-6p75No score
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers...
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
- Record
GHSA-v3w6-x84c-6p75- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.