CVE-2002-2066

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.

Ссылки

http://www.bcwipe.com/
Product
http://www.ciac.org/ciac/bulletins/m-034.shtml
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/7953.php
Broken Link
http://www.securityfocus.com/archive/1/251565
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/3912
Broken Link
Third Party Advisory
VDB Entry
http://www.seifried.org/security/advisories/kssa-003.html
Broken Link
Vendor Advisory
http://www.bcwipe.com/
Product
http://www.ciac.org/ciac/bulletins/m-034.shtml
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/7953.php
Broken Link
http://www.securityfocus.com/archive/1/251565
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/3912
Broken Link
Third Party Advisory
VDB Entry
http://www.seifried.org/security/advisories/kssa-003.html
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jetico:bcwipe:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.35.1 (включая)

cpe:2.3:a:jetico:bcwipe:1.0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.02099

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-459

Связанные уязвимости

GHSA-875x-x5q8-g85f