PT-2005-3781 · Check Point · Zonealarm Security Suite+1

Published 2005-12-31 · Updated 2017-07-11 · CVE-2005-2932

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Zone Labs ZoneAlarm versions prior to 7.0.362 ZoneAlarm Security Suite versions 5.5.062.004 and 6.5.737

Description The issue is related to insecure default permissions for critical files in ZoneAlarm products, allowing local users to gain privileges or bypass security controls.

Recommendations For Check Point Zone Labs ZoneAlarm versions prior to 7.0.362, update to version 7.0.362 or later to resolve the issue. For ZoneAlarm Security Suite versions 5.5.062.004 and 6.5.737, update to a version later than 6.5.737 to mitigate the risk.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2005-2932

Affected Products

Zonealarm

Zonealarm Security Suite

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-2932 · Security Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584 · Vendor Advisory
• http://secunia.com/advisories/26513 · Vendor Advisory
• http://securitytracker.com/id?1018588 · Note
• http://securityfocus.com/bid/25365 · Note
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36110 · Note
• http://securityfocus.com/bid/25377 · Note
• http://vupen.com/english/advisories/2007/2929 · Note