CVE-2005-2932
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkpoint | zonealarm | * | cpe:2.3:a:checkpoint:zonealarm:*:*:*:*:*:*:*:* |
| checkpoint | zonealarm_security_suite | 5.5.062.004 | cpe:2.3:a:checkpoint:zonealarm_security_suite:5.5.062.004:*:*:*:*:*:*:* |
| checkpoint | zonealarm_security_suite | 6.5.737 | cpe:2.3:a:checkpoint:zonealarm_security_suite:6.5.737:*:*:*:*:*:*:* |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=584
secunia.com/advisories/26513
securitytracker.com/id?1018588
www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53
www.securityfocus.com/bid/25365
www.securityfocus.com/bid/25377
www.vupen.com/english/advisories/2007/2929
exchange.xforce.ibmcloud.com/vulnerabilities/36110
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%