Unscored severity · published Dec 10, 2005
CVE-2005-4151
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Desktop · Pgp
through 9.0.3_build_2932; 8.0; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4151
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
Exploit
http://metasploit.com/research/vulns/pgp_slackspace/
Vendor Advisory
http://secunia.com/advisories/17827
www.osvdb.org
http://www.osvdb.org/21569
www.securityfocus.com
http://www.securityfocus.com/archive/1/419077/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/419282/100/0/threaded
More from Desktop
–
CVE-2010-3397
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to…
–
CVE-2009-0681
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and…
–
CVE-2008-5731
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and…