Lucene search

MitreCVE-2002-2070

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2070

2005-07-1404:00:00

CWE-459

mitre

web.nvd.nist.gov

secureclean

windows

ntfs

data recovery

sensitive information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

68.3%

JSON

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.

Affected configurations

Nvd

Node

accessdatasecurecleanMatch3build_2.0

VendorProductVersionCPE
accessdatasecureclean3cpe:2.3:a:accessdata:secureclean:3:build_2.0:*:*:*:*:*:*

Vendor	Product	Version	CPE
accessdata	secureclean	3	cpe:2.3:a:accessdata:secureclean:3:build_2.0::::::

References

www.ciac.org/ciac/bulletins/m-034.shtml

www.iss.net/security_center/static/7953.php

www.securityfocus.com/archive/1/251565

www.securityfocus.com/bid/3912

www.seifried.org/security/advisories/kssa-003.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

68.3%

JSON

Related for CVE-2002-2070