Xircom Rex 6000 Password Retrieval Vulnerability

Xircom Rex 6000 Password Retrieval Vulnerability

Xircom Rex 6000 PDA users can install Rextools on their desktop in order to manage the content on their MicroPDA device. This process involves the user connecting the PDA to a serial port (COMx) on the standalone system, and submitting a ten digit pin code in order to display the content from the PDA in Rextools.

A flaw exists in the transfer of the pin code information from the PDA to the Rextools application. The Rex 6000 sends the authentication information in plain text.