Password Bypass in Kingston USB Flash Drives
CVE-2010-0221

Currently unrated

Key Information:

Vendor: Kingston
Status: Datatraveler Blackbox; Datatraveler Elite; Datatraveler Secure
Vendor: CVE Published:; 7 January 2010

What is CVE-2010-0221?

Kingston DataTraveler BlackBox, Secure Privacy Edition, and Elite Privacy Edition USB flash drives exhibit a vulnerability in their password validation process. This mechanism relies on host computer software instead of secure device hardware, enabling physically proximate attackers to potentially access the unencrypted contents of the drives by exploiting modified programs. This flaw compromises the integrity of data protection that users expect from hardware-encrypted solutions.

References

http://www.kingston.com/driveupdate/

x_refsource_MISC

http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5...

x_refsource_MISC

http://securitytracker.com/id?1023410

vdb-entryx_refsource_SECTRACK

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 7, 2010
Vulnerability Reserved
Jan 7, 2010

CVE-2010-0221 Data

JSON