CVE-2002-1975: Weak Encryption
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1975?
CVE-2002-1975 is considered to be a moderate risk vulnerability due to its potential for local exploitation.
How do I fix CVE-2002-1975?
To mitigate CVE-2002-1975, users should update their Sharp Zaurus devices to the latest firmware version that addresses this vulnerability.
Who is affected by CVE-2002-1975?
CVE-2002-1975 affects Sharp Zaurus PDA models SL-5000D and SL-5500.
What type of attack is possible with CVE-2002-1975?
CVE-2002-1975 may allow local attackers to guess the screen-locking password using brute force methods.
Is there a public exploit for CVE-2002-1975?
There is no widely known public exploit specifically for CVE-2002-1975, but the vulnerability's nature makes it susceptible to local attacks.