PalmOS MemoPad Memo Hiding Bypass Vulnerability

Bugtraq ID:	8156
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 09 2003 12:00AM
Updated:	Jul 09 2003 12:00AM
Credit:	Vulnerability reported by Shaun Colley <[email protected]>.
Vulnerable:	Palm Palm OS 5.0 Palm Palm OS 4.1 Palm Palm OS 4.0 Palm Palm OS 3.5.2 Palm Palm OS 3.5 h Palm Palm OS 3.3
Not Vulnerable:

PalmOS MemoPad Memo Hiding Bypass Vulnerability

It has been reported that PalmOS does not provide adequate protection on documents that have privacy enabled. This option is designed to prevent unauthorized users from modifying sensitive or confidential files. It may be possible to modify these files by using an application capable of viewing text files other than MemoPad.

PalmOS MemoPad Memo Hiding Bypass Vulnerability

This vulnerability can be exploited with a third-party text editor.

PalmOS MemoPad Memo Hiding Bypass Vulnerability

References:

• PalmOS Memo Record Hiding Vulnerability. (Shaun Moore )