7.5

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AccessdataSecureclean Version3 Updatebuild_2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.07% 0.79
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://www.ciac.org/ciac/bulletins/m-034.shtml
Vendor Advisory
Broken Link
http://www.iss.net/security_center/static/7953.php
Broken Link
http://www.securityfocus.com/archive/1/251565
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/3912
Third Party Advisory
Broken Link
VDB Entry
http://www.seifried.org/security/advisories/kssa-003.html
Vendor Advisory
Broken Link