PT-2005-3781 · Check Point · Zonealarm Security Suite+1
Publicado
2005-12-31
·
Atualizado
2017-07-11
·
CVE-2005-2932
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Check Point Zone Labs ZoneAlarm versions prior to 7.0.362
ZoneAlarm Security Suite versions 5.5.062.004 and 6.5.737
Description
The issue is related to insecure default permissions for critical files in ZoneAlarm products, allowing local users to gain privileges or bypass security controls.
Recommendations
For Check Point Zone Labs ZoneAlarm versions prior to 7.0.362, update to version 7.0.362 or later to resolve the issue.
For ZoneAlarm Security Suite versions 5.5.062.004 and 6.5.737, update to a version later than 6.5.737 to mitigate the risk.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zonealarm
Zonealarm Security Suite