CVE-2002-2070

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.

Ссылки

http://www.ciac.org/ciac/bulletins/m-034.shtml
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/7953.php
Broken Link
http://www.securityfocus.com/archive/1/251565
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/3912
Broken Link
Third Party Advisory
VDB Entry
http://www.seifried.org/security/advisories/kssa-003.html
Broken Link
Vendor Advisory
http://www.ciac.org/ciac/bulletins/m-034.shtml
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/7953.php
Broken Link
http://www.securityfocus.com/archive/1/251565
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/3912
Broken Link
Third Party Advisory
VDB Entry
http://www.seifried.org/security/advisories/kssa-003.html
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:accessdata:secureclean:3:build_2.0:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00699

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-459

Связанные уязвимости

GHSA-64cj-w4v7-5f35