Lucene search

K
cveMitreCVE-2004-2713
HistoryOct 06, 2007 - 9:00 p.m.

CVE-2004-2713

2007-10-0621:00:00
CWE-264
mitre
web.nvd.nist.gov
32
cve
2004
2713
zone alarm pro
vulnerability
denial of service
permission issue
local users
everyone group
dispute
vendor
nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0

Percentile

5.1%

Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file

Affected configurations

Nvd
Node
zonelabszonealarmMatch1.0pro
VendorProductVersionCPE
zonelabszonealarm1.0cpe:2.3:a:zonelabs:zonealarm:1.0:*:pro:*:*:*:*:*

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2004-2713