CVE-2005-4151
First published: Sat Dec 10 2005(Updated: )
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PGP (Pretty Good Privacy) | <=9.0.3_build_2932 | |
| PGP (Pretty Good Privacy) | =8.0 | |
| PGP (Pretty Good Privacy) | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://metasploit.com/research/vulns/pgp_slackspace/
- http://www.securityfocus.com/bid/15784
- http://secunia.com/advisories/17827
- http://www.osvdb.org/21569
- http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
- http://www.securityfocus.com/archive/1/419654/100/0/threaded
- http://www.securityfocus.com/archive/1/419282/100/0/threaded
- http://www.securityfocus.com/archive/1/419077/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2005-4151?
CVE-2005-4151 is classified as a medium severity vulnerability due to the risk of unauthorized access to sensitive data in file slack space.
How do I fix CVE-2005-4151?
To fix CVE-2005-4151, users should upgrade to the latest version of PGP Desktop that addresses this issue.
What systems are affected by CVE-2005-4151?
CVE-2005-4151 affects PGP Desktop Home version 8.0 and PGP Desktop Professional versions up to and including 9.0.3 Build 2932.
What type of attack is related to CVE-2005-4151?
CVE-2005-4151 allows local users to exploit file slack space, potentially accessing previously deleted sensitive information.
Who is impacted by CVE-2005-4151?
Local users with access to systems running vulnerable versions of PGP Desktop can be impacted by CVE-2005-4151.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/pgp
- canonical/pgp (pretty good privacy)
- version/pgp (pretty good privacy)/9.0.3_build_2932
- version/pgp (pretty good privacy)/8.0
- version/pgp (pretty good privacy)/9.0