PT-2002-2787 · Microsoft+1 · Ntfs+2

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-2067

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002

Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems.

Recommendations: For East-Tec Eraser version 2002, consider manually clearing Windows alternate data streams attached to files on NTFS file systems to prevent the recovery of sensitive information.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2002-2067

Affected Products

East-Tec Eraser

Ntfs

Windows

References · 8

• http://seifried.org/security/advisories/kssa-003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2067 · Security Note
• http://ciac.org/ciac/bulletins/m-034.shtml · Vendor Advisory
• http://securityfocus.com/bid/3912 · Note
• https://t.me/cvenotify/70654 · Telegram Post
• http://securityfocus.com/archive/1/251565 · Note
• http://iss.net/security_center/static/7953.php · Note
• http://east-tec.com/eraser/faq.htm · Note