PT-2002-2885 · Unknown · Designer/Filler

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2172

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Designer and Filler version 3.05

Description: The issue concerns the failure to zero out newly allocated disk blocks when an encrypted file increases in size. This may allow attackers to obtain sensitive information.

Recommendations: For version 3.05, update to a version that properly secures newly allocated disk blocks for encrypted files, ensuring sensitive information is protected.

Fix

Related Identifiers

CVE-2002-2172

Affected Products

Designer/Filler

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2172 · Security Note
• http://securityfocus.com/bid/5795 · Patch
• http://cirt.net/advisories/shana.shtml · Vendor Advisory
• http://iss.net/security_center/static/10192.php · Note
• http://online.securityfocus.com/archive/1/293052 · Note