CVE-2001-0157 Auth bypass in n/a

Medium 4.6 Published 7 May 2001 Updated 8 Aug 2024

Attackers with physical access can bypass Palm OS lockouts via a debugging backdoor to obtain passwords and access restricted data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2001-0157?

CVE-2001-0157 is a medium-severity authentication bypass vulnerability in n/a, published on 7 May 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled.

Which versions are affected by CVE-2001-0157?

It affects 1 product.

Products include Palm Palm Os.

How do I fix CVE-2001-0157?

No fix has been published for CVE-2001-0157 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2001-0157 being exploited?

There is no known exploitation of CVE-2001-0157 in the wild and no public exploit code.

Sources

Also known as GHSA-qp59-vc39-7x3c.