Description
Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.
References
- pointsec-palmos-plaintext-pin(9021) vdb-entry
- 20020507 KPMG-2002018: Pointsec for PalmOS PIN disclosure mailing-list
- 4681 vdb-entry