Title: ButtUglySoftware CleanCache Insecure Data Removal Vulnerability
Severity: LOW
Description:
CleanCache is a utility that deletes cache contents from computers running Internet Explorer 6.0 and Windows 2000/XP. Temporary Internet Files, Internet Explorer history, cookies and files can be removed using the application. CleanCache claims to remove files using DoD and NSA wiping algorithms.
It is reported that CleanCache does not remove potentially sensitive data including cache contents in a secure manner. A local attacker can employ data recovery tools to disclose data that was previously deleted by the utility. This can allow an attacker to disclose potentially sensitive information that may be used to carry out further attacks against a vulnerable computer and users.
CleanCache 2.19 is reported prone to this vulnerability.
Affected Products:
- ButtUglySoftware CleanCache 2.19.0
References:
- ButtUglySoftware: Home Page
- SecurityTracker: CleanCache Fails to Wipe Files
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
