PT-2002-2786 · Microsoft+1 · Ntfs+2

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-2066

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1

Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems.

Recommendations: For BestCrypt BCWipe version 1.0.7, update to a version that properly clears Windows alternate data streams. For BestCrypt BCWipe versions 2.0 through 2.35.1, update to a version that properly clears Windows alternate data streams. As a temporary workaround, consider manually clearing Windows alternate data streams for sensitive files until a patch is available.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2002-2066

Affected Products

Bestcrypt Bcwipe

Ntfs

Windows

References · 8

• http://seifried.org/security/advisories/kssa-003.html · Vendor Advisory
• http://ciac.org/ciac/bulletins/m-034.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2066 · Security Note
• http://securityfocus.com/bid/3912 · Note
• http://bcwipe.com · Note
• https://t.me/cvenotify/70653 · Telegram Post
• http://securityfocus.com/archive/1/251565 · Note
• http://iss.net/security_center/static/7953.php · Note