PT-2002-2633 · Zonealarm · Zonealarm Pro

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1911

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ZoneAlarm Pro versions 3.0 through 3.1

Description The issue allows remote attackers to cause a denial of service by consuming CPU and memory resources via a large number of SYN packets, also known as a SYN flood. The vendor was unable to reproduce the issue.

Recommendations For ZoneAlarm Pro versions 3.0 and 3.1, consider configuring the firewall to limit the number of incoming SYN packets to prevent CPU and memory consumption. As a temporary workaround, restrict access to the network to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1911

Produtos afetados

Zonealarm Pro

Referências · 6

• 🔥 https://exploit-db.com/exploits/21943 · Exploit
• 🔥 http://securityfocus.com/bid/5975 · Exploit
• http://securityfocus.com/archive/1/295434 · Nota
• http://iss.net/security_center/static/10379.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1911 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0238.html · Nota