CVE-2002-0788

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-459

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.htmlBroken Link, Patch, Vendor Advisory
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txtThird Party Advisory
http://www.iss.net/security_center/static/9044.phpBroken Link, Patch, Vendor Advisory
http://www.osvdb.org/4363Broken Link
http://www.securityfocus.com/bid/4702Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.htmlBroken Link, Patch, Vendor Advisory
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txtThird Party Advisory
http://www.iss.net/security_center/static/9044.phpBroken Link, Patch, Vendor Advisory
http://www.osvdb.org/4363Broken Link
http://www.securityfocus.com/bid/4702Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-07897.5Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) param CVE-2002-07902.1clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.CVE-2002-07915.0Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the CVE-2002-07925.0The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (sof CVE-2002-07935.5Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files vi CVE-2002-07945.0The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncach CVE-2002-07952.1The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock f CVE-2002-079610.0Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-079710.0Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-07982.1Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by CVE-2002-07997.5Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.CVE-2002-08005.0BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.