Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0275. PoCs published by kingpin.
AI-analyzed exploit summary The exploit describes a vulnerability in CRYPTOCard CRYPTOAdmin where a fixed 4-byte key generation value allows retrieval of PIN numbers from .pdb files, enabling token duplication and unauthorized network access.
Description
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
Exploits (2)
The exploit describes a vulnerability in CRYPTOCard CRYPTOAdmin where a fixed 4-byte key generation value allows retrieval of PIN numbers from .pdb files, enabling token duplication and unauthorized network access.
This exploit decrypts the PIN from a CRYPTOCard .pdb file by brute-forcing a weak DES key derived from a fixed 4-byte value. It reads the ciphertext from the file and attempts decryption with incrementally generated keys until the correct PIN is found.