PT-2002-2790 · Microsoft+1 · Windows+2

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-2070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SecureClean version 3 build 2.0

Description: The issue concerns the failure to clear Windows alternate data streams attached to files on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted.

Recommendations: For SecureClean version 3 build 2.0, consider manually clearing Windows alternate data streams on NTFS file systems after deletion, as the software does not perform this action.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2002-2070

Affected Products

Ntfs

Secureclean

Windows

References · 6

• http://seifried.org/security/advisories/kssa-003.html · Vendor Advisory
• http://ciac.org/ciac/bulletins/m-034.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2070 · Security Note
• http://securityfocus.com/bid/3912 · Note
• http://securityfocus.com/archive/1/251565 · Note
• http://iss.net/security_center/static/7953.php · Note