Starfish TrueSync Desktop Failure to Protect Data Vulnerability
BID:3232
Info
Starfish TrueSync Desktop Failure to Protect Data Vulnerability
| Bugtraq ID: | 3232 |
| Class: | Design Error |
| CVE: |
CVE-2001-1006 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 24 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | Reported to Bugtraq by Valentin Butanescu <[email protected]> on August 24, 2001. |
| Vulnerable: |
Starfish Software TrueSync Desktop 2.0 |
| Not Vulnerable: | |
Discussion
Starfish TrueSync Desktop Failure to Protect Data Vulnerability
Starfish Software's TrueSync Desktop is a personal information manager (PIM) software for Windows commonly used with wireless and wireline devices.
The TrueSync Desktop software provides users the ability to set a password for protecting stored files. Aside from employing a trivial method of storing user passwords (see BID 3231), the software also does not encrypt protected data files in any way.
An attacker can easily view the files through some other application. This may lead to the disclosure of sensitive information.
Starfish Software's TrueSync Desktop is a personal information manager (PIM) software for Windows commonly used with wireless and wireline devices.
The TrueSync Desktop software provides users the ability to set a password for protecting stored files. Aside from employing a trivial method of storing user passwords (see BID 3231), the software also does not encrypt protected data files in any way.
An attacker can easily view the files through some other application. This may lead to the disclosure of sensitive information.
Exploit / POC
Starfish TrueSync Desktop Failure to Protect Data Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Starfish TrueSync Desktop Failure to Protect Data Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.