CVE-2002-2069: High severity PGP Personal Privacy vulnerability
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2069?
CVE-2002-2069 is considered a moderate severity vulnerability that could lead to sensitive data recovery.
How do I fix CVE-2002-2069?
To fix CVE-2002-2069, upgrade to a newer version of PGP that does not have this vulnerability.
What versions of PGP are affected by CVE-2002-2069?
CVE-2002-2069 affects PGP versions 6.x and 7.x, including specific versions like 6.5.1, 6.5.2a, 7.0, and 7.0.3.
What are the implications of CVE-2002-2069?
The implications of CVE-2002-2069 include the potential exposure of sensitive information due to incomplete deletion processes.
Can I mitigate CVE-2002-2069 without upgrading?
To effectively mitigate CVE-2002-2069, it is recommended to upgrade, as there are no adequate workarounds for this vulnerability.