PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
BID:15784
Info
PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
| Bugtraq ID: | 15784 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 08 2005 12:00AM |
| Updated: | Dec 08 2005 12:00AM |
| Credit: | Discovered by Vinnie Liu, Metasploit. |
| Vulnerable: |
PGP Corporation PGP Desktop Professional 9.0.3 Build 2932 PGP Corporation PGP Desktop Professional 9.0 PGP Corporation PGP Desktop Home 8.0 |
| Not Vulnerable: | |
Discussion
PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
PGP Desktop Wipe Free Space Assistant is prone to a vulnerability that causes the application to improperly wipe a hard disk.
This can allow an attacker to obtain data that is stored on the file slack space.
Information gathered through the exploitation of this vulnerability may lead to further attacks.
PGP Desktop Professional 9.0.3 Build 2932 and PGP Desktop Home 8.x versions are reportedly vulnerable to this issue. Other versions may be affected as well.
PGP Desktop Wipe Free Space Assistant is prone to a vulnerability that causes the application to improperly wipe a hard disk.
This can allow an attacker to obtain data that is stored on the file slack space.
Information gathered through the exploitation of this vulnerability may lead to further attacks.
PGP Desktop Professional 9.0.3 Build 2932 and PGP Desktop Home 8.x versions are reportedly vulnerable to this issue. Other versions may be affected as well.
Exploit / POC
PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
An exploit is not required.
Metasploit Anti-Forensics Project has released a tool named Slacker that may be used to exploit this issue. This tool is available from the following location:
http://www.metasploit.com/projects/antiforensics/slacker.exe
An exploit is not required.
Metasploit Anti-Forensics Project has released a tool named Slacker that may be used to exploit this issue. This tool is available from the following location:
http://www.metasploit.com/projects/antiforensics/slacker.exe
Solution / Fix
PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PGP Desktop Wipe Free Space Assistant Improper Disk Wipe Vulnerability
References:
References:
- PGP Desktop Product Page (PGP Corporation)
- PGP Desktop Wipe Free Space Flaw (Metasploit Framework)