CVE-2002-2069 PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp personal privacy | >= 6.0.2, <= 6.5.8 | No fix listed |
| pgp personal privacy | >= 7.0, <= 7.1.1 | No fix listed |
References
- M-034 broken-link government-resource third-party-advisory vendor-advisory
- ntfs-ads-file-wipe(7953) broken-link vdb-entry
- 20020120 KSSA-003 - Multiple windows file wiping utilities do not properly wipe data with NTFS broken-link mailing-list third-party-advisory vdb-entry
- 3912 broken-link third-party-advisory vdb-entry
- www.seifried.org broken-link vendor-advisory