CVE-2002-2066 BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information tha...
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetico bcwipe | >= 2.0, <= 2.35.1 | No fix listed |
| jetico bcwipe | = 1.0.7 | No fix listed |
References
- www.bcwipe.com product
- M-034 broken-link government-resource third-party-advisory vendor-advisory
- ntfs-ads-file-wipe(7953) broken-link vdb-entry
- 20020120 KSSA-003 - Multiple windows file wiping utilities do not properly wipe data with NTFS broken-link mailing-list third-party-advisory vdb-entry
- 3912 broken-link third-party-advisory vdb-entry
- www.seifried.org broken-link vendor-advisory