CVE-2002-0788 Information disclosure in n/a
Local attackers with physical access can recover cleartext data from temporary files created by PGP when using Windows EFS and the wipe deleted files option.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0788?
CVE-2002-0788 is a medium-severity vulnerability in n/a, published on 2 Apr 2003. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Weakness: CWE-459
Which versions are affected by CVE-2002-0788?
It affects 3 products.
Products include Pgp Corporate Desktop, Pgp Freeware, Pgp Personal Security.
How do I fix CVE-2002-0788?
No fix has been published for CVE-2002-0788 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0788 being exploited?
There is no known exploitation of CVE-2002-0788 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fjc3-77q6-8ffr.