CVE-2002-0788: Medium severity PGP Freeware vulnerability
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0788?
CVE-2002-0788 is considered a medium severity vulnerability due to its potential for local exploitation.
How do I fix CVE-2002-0788?
To mitigate CVE-2002-0788, users should upgrade to a newer version of PGP that does not exhibit this vulnerability.
Who is affected by CVE-2002-0788?
CVE-2002-0788 affects users of PGP versions 7.0.3 and 7.1 on Windows operating systems.
What types of attacks can exploit CVE-2002-0788?
Exploiting CVE-2002-0788 could allow local users or attackers with physical access to retrieve sensitive information from cleartext temporary files.
What is the cause of CVE-2002-0788?
CVE-2002-0788 arises from a flaw in how certain PGP versions handle temporary files in conjunction with the Windows Encrypted File System.