5.5

CVE-2002-0788

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pgp ≫ Corporate Desktop Version 7.1
Pgp ≫ Freeware Version 7.0.3
Pgp ≫ Personal Security Version 7.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.291
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html
Patch
Vendor Advisory
Broken Link
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt
Third Party Advisory
http://www.iss.net/security_center/static/9044.php
Patch
Vendor Advisory
Broken Link
http://www.osvdb.org/4363
Broken Link
http://www.securityfocus.com/bid/4702
Patch
Third Party Advisory
Vendor Advisory
Broken Link
VDB Entry