PT-2004-3603 · Zonealarm · Zonealarm Pro

CVE-2004-2713 · Publicado 2004-12-31 · Atualizado 2024-08-08

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Zone Alarm Pro versions 1.0 through 5.1

Description The issue allows local users to cause a denial of service by modifying the folder contents or permissions of the %windir%Internet Logs* directory, which is accessible to the EVERYONE group. This gives full access to the directory, potentially disrupting system functionality. Note that the vendor has disputed this issue, claiming it does not affect product functionality since the same information is also saved in a protected file.

Recommendations For Zone Alarm Pro versions 1.0 through 5.1, consider restricting access to the %windir%Internet Logs* directory to prevent local users from modifying its contents or permissions, which could cause a denial of service.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2004-2713

Produtos afetados

Zonealarm Pro

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/17099 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html · Nota
• http://osvdb.org/9761 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2713 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html · Nota