CVE-2006-6286 - CVE House
Back to Database
Status published Low CVE-2006-6286

Palm Desktop 4.1.4 and earlier stores user data with weak...

Vulnerability Description

Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information (address books, calendar files, and todo lists of other users) via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6286

Credits & Attribution

No credits recorded in the NVD database.

References

More from palm

View All →
CVE-2007-4213
Palm OS on Treo 650, 680, 700p, and 755p Smart...
High 7.1
CVE-2007-0859
The Find feature in Palm OS Treo smart phones operates...
Low 2.1
CVE-2003-0293
PalmOS allows remote attackers to cause a denial of service...
Medium 5
CVE-2002-0120
Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files...
Low 2.1
CVE-2002-0116
Palm OS 3.5h and possibly other versions, as used in...
Medium 5

Affected Vendor

Affected Software

palm desktop
Vulnerable Versions:
0, 4.0b76, 4.0b77

Timeline

Official Publish: December 4th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.