5.5

CVE-2002-0788

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pgp ≫ Corporate Desktop Version7.1
Pgp ≫ Freeware Version7.0.3
Pgp ≫ Personal Security Version7.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.327
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://www.iss.net/security_center/static/9044.php
Patch
Vendor Advisory
Broken Link
http://www.securityfocus.com/bid/4702
Patch
Third Party Advisory
Vendor Advisory
Broken Link
VDB Entry