PT-2004-1463 · Zonelabs · Zonealarm+1

Riley Hassell · Publicado 2004-09-01 · Atualizado 2017-10-10 · CVE-2004-0309

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZoneAlarm versions prior to 4.5.538.001 ZoneLabs Integrity client versions prior to 4.0.146.046 ZoneLabs Integrity client 4.5 versions prior to 4.5.085

Description The issue is a stack-based buffer overflow in the SMTP service support in vsmon.exe. This allows remote attackers to execute arbitrary code via a long RCPT TO argument.

Recommendations For ZoneAlarm versions prior to 4.5.538.001, update to version 4.5.538.001 or later. For ZoneLabs Integrity client versions prior to 4.0.146.046, update to version 4.0.146.046 or later. For ZoneLabs Integrity client 4.5 versions prior to 4.5.085, update to version 4.5.085 or later.

Correção

Identificadores relacionados

CVE-2004-0309

Produtos afetados

Zonealarm

Zonelabs Integrity Client

Referências · 8

• http://ciac.org/ciac/bulletins/o-084.shtml · Nota
• http://download.zonelabs.com/bin/free/securityAlert/8.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0309 · Nota de Segurança
• http://osvdb.org/3991 · Nota
• http://marc.info/?l=bugtraq&m=107722656827427&w=2 · Nota
• http://kb.cert.org/vuls/id/619982 · Nota
• http://securityfocus.com/bid/9696 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14991 · Nota