Approved changes feed: RSS · Atom

cpe:2.3:a:starfish:truesync_desktop:2.0b:*:*:*:*:*:*:*

part: a version: 2.0b update: *

VendorStarfish (dbdcee48-95b8-5d40-abde-ae7436a6704c)
ProductTruesync Desktop (a56ffb1f-da05-5fe7-bc3a-3b4762f75856)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1007 vulnerable 2026-06-08 04:45:21.249834 Details available
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:07.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1006 vulnerable 2026-06-08 04:45:21.249588 Details available
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:07.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1005 vulnerable 2026-06-08 04:45:21.249273 Details available
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:07.043Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.