CVE-2002-2069 json
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to re…
published 2002-12-31 23 y ago modified 2026-06-16 4 mo ago also EUVD-2002-2048
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.1%
- EPSS 2.1% chance of exploitation in 30 days, percentile 81%
- public exploits
- 0
- none known
Summary
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Exploit prediction
2.07% chance of exploitation in the next 30 days, higher than 81% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-459 Incomplete Cleanup
References
-
seifried.org
/security/advisories/kssa-003.html
broken-link, vendor-advisory
-
ciac.org
/ciac/bulletins/m-034.shtml
third-party-advisory, government-resource, broken-link, vendor-advisory
-
securityfocus.com
/bid/3912
vdb-entry, broken-link, third-party-advisory
-
iss.net
/security_center/static/7953.php
vdb-entry, broken-link
-
securityfocus.com
/archive/1/251565
mailing-list, broken-link, third-party-advisory, vdb-entry
Sources
- CVE List CVE-2002-2069
- NVD CVE-2002-2069
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.