PT-2002-2633 · Zonealarm · Zonealarm Pro

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1911

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ZoneAlarm Pro versions 3.0 through 3.1

Description The issue allows remote attackers to cause a denial of service by consuming CPU and memory resources via a large number of SYN packets, also known as a SYN flood. The vendor was unable to reproduce the issue.

Recommendations For ZoneAlarm Pro versions 3.0 and 3.1, consider configuring the firewall to limit the number of incoming SYN packets to prevent CPU and memory consumption. As a temporary workaround, restrict access to the network to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1911

Affected Products

Zonealarm Pro

References · 6

• 🔥 https://exploit-db.com/exploits/21943 · Exploit
• 🔥 http://securityfocus.com/bid/5975 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1911 · Security Note
• http://securityfocus.com/archive/1/295434 · Note
• http://iss.net/security_center/static/10379.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0238.html · Note