USN-151-3: zlib vulnerabilities

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues. The updated packagages...

zlib -- buffer overflow vulnerability

Problem description A fixed-size buffer is used in the decompression of data streams. Due to erronous analysis performed when zlib was written, this buffer, which was belived to be sufficiently large to handle any possible input stream, is in fact too small. Impact A carefully constructed...

USN-151-2: zlib vulnerabilities

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Most applications use the shared library provided by the "zlib1g" package; however, some packages contain copies of t...

CVE-2002-2067

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2068

The CVE-2002-2068 entry concerns Eraser 5.3 failing to clear Windows alternate data streams (ADS) attached to NTFS files, enabling recovery of data that should be deleted. Affected software: Eraser 5.3; root cause: ADS not cleared. Impact stated: data that was supposed to be deleted can be recove...

CVE-2002-2067

East-Tec Eraser 2002 on Windows NTFS fails to clear alternate data streams attached to files, allowing recovery of supposedly deleted sensitive information. Descriptions across NVD, Red Hat, and CVE records confirm the issue and its impact on confidentiality (partial in CVSS v2, high in CVSS v3.1...

CVE-2002-2069

PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

PT-2002-2788 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: Eraser version 5.3 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-2786 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS...

PT-2002-2789 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: PGP versions 6.x through 7.x Description: The issue allows attackers to recover sensitive information that was supposed to be deleted by not clearing Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-2787 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems...

PT-2002-2790 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: SecureClean version 3 build 2.0 Description: The issue concerns the failure to clear Windows alternate data streams attached to files on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 has a vulnerability where file sizes in alternate data streams are not recorded, allowing quota bypass. Affected: QuotaAdvisor 4.1. Root cause: improper handling of alternate data streams leading to inaccurate quota accounting (partial impact on confidentiality, integrity,...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...