PT-2002-2787 · Microsoft+1 · Ntfs+2

CVE-2002-2067 · Publicado 2002-12-31 · Atualizado 2024-02-08

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002

Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems.

Recommendations: For East-Tec Eraser version 2002, consider manually clearing Windows alternate data streams attached to files on NTFS file systems to prevent the recovery of sensitive information.

Correção

Enumeração de Fraquezas

CWE-459

Identificadores relacionados

CVE-2002-2067

Produtos afetados

East-Tec Eraser

Ntfs

Windows

Referências · 8

• http://seifried.org/security/advisories/kssa-003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-2067 · Nota de Segurança
• http://securityfocus.com/bid/3912 · Nota
• https://t.me/cvenotify/70654 · Publicação no Telegram
• http://ciac.org/ciac/bulletins/m-034.shtml · Aviso do Fabricante
• http://securityfocus.com/archive/1/251565 · Nota
• http://iss.net/security_center/static/7953.php · Nota
• http://east-tec.com/eraser/faq.htm · Nota