CVE-2002-0788 An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to stro...
MediumCVSS 5.5
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp corporate desktop | = 7.1 | No fix listed |
| pgp freeware | = 7.0.3 | No fix listed |
| pgp personal security | = 7.0.3 | No fix listed |
References
- 20020508 NTFS and PGP interact to expose EFS encrypted data broken-link mailing-list patch vendor-advisory
- download.nai.com third-party-advisory
- pgp-ntfs-reveal-data(9044) broken-link patch vdb-entry vendor-advisory
- 4363 broken-link vdb-entry
- 4702 broken-link patch third-party-advisory vdb-entry vendor-advisory