CVE-2002-2067

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Weaknesses

CWE-459

Affected products

• Eraser (East-tec)

References

• http://www.ciac.org/ciac/bulletins/m-034.shtml
• http://www.east-tec.com/eraser/faq.htm
• http://www.iss.net/security_center/static/7953.php
• http://www.securityfocus.com/archive/1/251565
• http://www.securityfocus.com/bid/3912
• http://www.seifried.org/security/advisories/kssa-003.html