PT-2002-2788 · Microsoft+1 · Ntfs+2

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-2068

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Eraser version 5.3

Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems.

Recommendations: For Eraser version 5.3, consider manually removing Windows alternate data streams from files on NTFS file systems after deletion, or seek an alternative secure deletion method until a fix is available.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2002-2068

Affected Products

Eraser

Ntfs

Windows

References · 7

• http://seifried.org/security/advisories/kssa-003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2068 · Security Note
• http://ciac.org/ciac/bulletins/m-034.shtml · Vendor Advisory
• https://t.me/cvenotify/70655 · Telegram Post
• http://securityfocus.com/archive/1/251565 · Note
• http://iss.net/security_center/static/7953.php · Note
• http://securityfocus.com/bid/3912 · Note