Lucene search

MitreCVE-2002-2067

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2067

2005-07-1404:00:00

CWE-459

mitre

web.nvd.nist.gov

east-tec eraser 2002

windows

alternate data streams

ntfs

information security

data deletion

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

77.6%

JSON

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.

Affected configurations

Nvd

Node

east-teceraserMatch2002

VendorProductVersionCPE
east-teceraser2002cpe:2.3:a:east-tec:eraser:2002:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
east-tec	eraser	2002	cpe:2.3:a:east-tec:eraser:2002:::::::*

References

www.ciac.org/ciac/bulletins/m-034.shtml

www.east-tec.com/eraser/faq.htm

www.iss.net/security_center/static/7953.php

www.securityfocus.com/archive/1/251565

www.securityfocus.com/bid/3912

www.seifried.org/security/advisories/kssa-003.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

77.6%

JSON

Related for CVE-2002-2067