CVE-2005-4151

LOW 2.1CVE-2005-4151 · Published 10/12/2005 · updated 16/06/2026

In short

CVE-2005-4151 is a LOW (CVSS 2.1) vulnerability affecting desktop (pgp).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
desktop pgp	`= 8.0= 9.0≤ 9.0.3_build_2932`	No fix yet

Description

The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.

References

archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
metasploit.com/research/vulns/pgp_slackspace · Exploit
secunia.com/advisories/17827 · Vendor Advisory
osvdb.org/21569
securityfocus.com/archive/1/419077/100/0/threaded
securityfocus.com/archive/1/419282/100/0/threaded
securityfocus.com/archive/1/419654/100/0/threaded
securityfocus.com/bid/15784 · Exploit

More vulnerabilities in desktop

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free