PT-2003-2469 · Pgpi+1 · Pgpdisk+1

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1524

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions PGPi PGPDisk version 6.0.2i

Description The issue allows local users to access data on another user's PGP partition when the switch user function in Windows XP is used, because PGPi PGPDisk 6.0.2i does not unmount a PGP partition.

Recommendations For PGPi PGPDisk version 6.0.2i, consider manually unmounting the PGP partition when switching users in Windows XP to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2003-1524

Affected Products

Pgpdisk

Windows Xp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1524 · Security Note
• http://securiteam.com/windowsntfocus/6M00L0K8KI.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13490 · Note
• http://securityfocus.com/bid/8870 · Note