CVE-2000-0275
2.1 · LOWOverview
CVE-2000-0275 is a low-severity vulnerability affecting cryptocard cryptoadmin. It was published on April 10, 2000 and has a CVSS 2.0 base score of 2.1 (LOW).
This vulnerability has a CVSS 2.0 base score of 2.1, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical Description
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
Remediation
Check the references section for vendor advisories and patches from cryptocard. Update cryptoadmin to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
Frequently Asked Questions
What is CVE-2000-0275?
CVE-2000-0275 is a low-severity vulnerability affecting cryptocard cryptoadmin. It was published on April 10, 2000 and has a CVSS 2.0 base score of 2.1 (LOW).
How severe is CVE-2000-0275?
This vulnerability has a CVSS 2.0 base score of 2.1, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-0275?
Check the references section for vendor advisories and patches from cryptocard. Update cryptoadmin to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-0275?
CyberStrike's AI-powered security agents can automatically detect CVE-2000-0275 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2000
View all →Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local use
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
The Protected Store in Windows 2000 does not properly select the strongest encryption when available
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w