Re: Palm Pilot - Palm Desktop Version 4 - Password bypass

[skelly <skelly () CENTRICS-TECHNOLOGY COM>]

v3.1 seems to be safe. The password is requested @ the splashscreen, before
the rest of the interface loads. Alt-F does nothing, and Alt-H brings up
help, which explains what a password is. NOTE: This may be a modified
version. It's the updated Handsping Visor version, but it still has the Palm
Software branding all over.

Sean Kelly
Network Technician
Centrics Technology

-----Original Message-----
From: Bugtraq List [mailto:BUGTRAQ () SECURITYFOCUS COM]On Behalf Of Secret
Ivan
Sent: Friday, February 09, 2001 8:09 AM
To: BUGTRAQ () SECURITYFOCUS COM
Subject: Palm Pilot - Palm Desktop Version 4 - Password bypass


I've only tested this with version 4.0 of the Palm
Desktop software.

Palm allows you set a password on the desktop
software.  Without a password you are not able to
view the data.

There is a way to bypass and get rid of the
desktop password.

On an existing Palm Desktop make sure the password
is set.  Once it asks you for the password you
need to press Alt-F or Alt-H to get the menu
structure.

Once you have the menu pulled down you navigate to
Tools | Options and select the Security tab.  Once
there you can uncheck the [] Require password
to access the Palm desktop.

Click OK and then cancel out and exit.  The next
time you restart the Palm desktop software the
password will be gone and anyone can view your
data.