CVE-2001-1005: Starfish Truesync Desktop

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.

Affected products

• Starfish Truesync Desktop: version 2.0b only

Published 2001-08-31. Last modified 2026-06-16.