PT-2005-4850 · Pgp · Pgp Desktop Professional+1

Published 2005-12-10 · Updated 2018-10-19 · CVE-2005-4151

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PGP Desktop Home version 8.0 PGP Desktop Professional versions prior to 9.0.3 Build 2932

Description The issue concerns the Wipe Free Space utility, which fails to clear file slack space in the last cluster for the file. This allows local users to access the previous contents of the disk.

Recommendations For PGP Desktop Home version 8.0, update to a version that includes a fix for the Wipe Free Space utility issue. For PGP Desktop Professional versions prior to 9.0.3 Build 2932, update to version 9.0.3 Build 2932 or later to resolve the issue with the Wipe Free Space utility.

Exploit

Fix

Related Identifiers

CVE-2005-4151

Affected Products

Pgp Desktop Home

Pgp Desktop Professional

References · 9

• 🔥 http://metasploit.com/research/vulns/pgp_slackspace · Exploit
• 🔥 http://securityfocus.com/bid/15784 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4151 · Security Note
• http://secunia.com/advisories/17827 · Vendor Advisory
• http://securityfocus.com/archive/1/419654/100/0/threaded · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html · Note
• http://securityfocus.com/archive/1/419282/100/0/threaded · Note
• http://osvdb.org/21569 · Note
• http://securityfocus.com/archive/1/419077/100/0/threaded · Note