PT-2001-2633 · Zonealarm · Zonealarm Pro+1

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1548

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ZoneAlarm versions 2.1 through 2.6 ZoneAlarm Pro versions 2.4 and 2.6

Description The issue allows local users to bypass filtering by utilizing non-standard TCP packets created with non-Windows protocol adapters.

Recommendations For ZoneAlarm versions 2.1 through 2.6, update to a version that is not affected by this issue. For ZoneAlarm Pro versions 2.4 and 2.6, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the use of non-Windows protocol adapters to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1548

Produtos afetados

Zonealarm

Zonealarm Pro

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html · Exploit
• 🔥 http://securityfocus.com/bid/3647 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1548 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-12/0065.html · Nota
• http://iss.net/security_center/static/7671.php · Nota