[19104] in bugtraq
Palm Pilot - Palm Desktop Version 4 - Password bypass
daemon@ATHENA.MIT.EDU (Secret Ivan)
Fri Feb 9 13:00:48 2001
Message-Id: <20010209140852.1397.qmail@securityfocus.com>
Date: Fri, 9 Feb 2001 14:08:52 -0000
Reply-To: secretivan@HOTMAIL.COM
From: Secret Ivan <secretivan@HOTMAIL.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
I've only tested this with version 4.0 of the Palm
Desktop software.
Palm allows you set a password on the desktop
software. Without a password you are not able to
view the data.
There is a way to bypass and get rid of the
desktop password.
On an existing Palm Desktop make sure the password
is set. Once it asks you for the password you
need to press Alt-F or Alt-H to get the menu
structure.
Once you have the menu pulled down you navigate to
Tools | Options and select the Security tab. Once
there you can uncheck the [] Require password
to access the Palm desktop.
Click OK and then cancel out and exit. The next
time you restart the Palm desktop software the
password will be gone and anyone can view your
data.
