Executive Summary

PalmOS 3.5.2 and earlier use weak encryption to store user passwords, enabling attackers with physical access to the device to decrypt the password and gain full device access. This vulnerability exposes sensitive data and allows unauthorized control of the device.

---

Authoritative CVE Metadata - CVSS Base Score: 4.6 (MEDIUM) - Published: 2000-12-11T05:00:00.000 - Last Modified: 2026-09-23T13:10:00.153

Original Description: PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

"Never doubt that a small group of thoughtful, committed people can change the world. Indeed. It is the only thing that ever has."

— Margaret Mead