Vulnerability Note VU#500963

Motorola Good Mobile Messaging insecure file deletion

Overview

When formating removable storage cards, Motorola Good Mobile Messaging products may not properly delete old data.

I. Description

Motorola Good Mobile Messaging products can create encrypted containers on removable media storage cards. During the process of creating the container old information on storage card may not be properly deleted.

II. Impact

Private information may remain on the storage card. If the card is lost, stolen, or redistributed the information could be obtained by a third party.

III. Solution

We are currently unaware of a practical solution to this problem.

Securely wipe storage cards

Administrators should use a data deletion tool that fills storage cards with data (overwriting private information) prior to using the cards in Good Mobile products. A similar process should be used when disposing or redistributing the cards.

Systems Affected

Vendor	Status	Date Updated
Motorola, Inc.	Vulnerable	28-May-2008

References

http://www.good.com/corp/index.php
http://www.sysresccd.org/Sysresccd-manual-en_Secure_Deletion_of_Data
http://en.wikipedia.org/wiki/Data_remanence#Specific_methods

Credit

Thanks to Michael J. Iacovacci for reporting this vulnerability.

This document was written by Ryan Giobbi.

Other Information

Date Public	03/24/2008
Date First Published	05/28/2008 07:45:40 PM
Date Last Updated	05/29/2008
CERT Advisory
CVE Name
US-CERT Technical Alerts
Metric	0.09
Document Revision	13