Description
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
References
- 3231 vdb-entry
- 20010824 Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities mailing-list