VulnerabilityModified
CVE-2001-1006
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
MEDIUM 5.0EPSS 1.10%
Does this matter?
Lower severity and a low EPSS score (1.10%). Track it; it rarely justifies an emergency change on its own.
Description
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.10% probability · 64th percentile
- CISA KEV
- Not listed
- Affected
- starfish/truesync desktop
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/210067Patch, Vendor Advisory
- http://www.securityfocus.com/bid/3232Vendor Advisory
- http://www.securityfocus.com/archive/1/210067Patch, Vendor Advisory
- http://www.securityfocus.com/bid/3232Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.