----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
ExpertEraser Device Configuration Overlay Disk Wiping Security Issue

SECUNIA ADVISORY ID:
SA15347

VERIFY ADVISORY:
http://secunia.com/advisories/15347/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
Local system

SOFTWARE:
ExpertEraser 2.x
http://secunia.com/product/5098/

DESCRIPTION:
Arne Vidström has reported a security issue in ExpertEraser, which
may disclose sensitive information to malicious people.

The problem is that the product doesn't support Device Configuration
Overlays (DCO) and therefore can't wipe parts of a disk using this
feature. This may result in a disk not being wiped sufficiently.

The security issue has been reported in version 2.0.

SOLUTION:
The vendor reports that all versions shipped after 2005-05-13 now
support DCO.

PROVIDED AND/OR DISCOVERED BY:
Arne Vidström

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------