340 matches found
ZoneAlarm Personal Firewall port 67 flaw
ZoneAlarm firewall runs on this host. This version contains a flaw that may allow a remote attacker to bypass the ruleset. The issue is due to ZoneAlarm not monitoring and alerting UDP traffic with a source port of 67. This allows an attacker to bypass the firewall to reach protected hosts withou...
ZoneAlarm Personal Firewall Port 67 Flaw
The version of ZoneAlarm firewall contains a flaw that may allow a remote attacker to bypass the ruleset. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
ZoneAlarm Pro Local DoS Vulnerability (CVE-2004-2713)
ZoneAlarm Pro is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ZoneAlarm Pro local DoS
ZoneAlarm Pro firewall runs on this host. This version contains a flaw that may allow a local denial of service. To exploit this flaw, an attacker would need to temper with the files located in %windir%/Internet Logs. An attacker may modify them and prevent ZoneAlarm to start up properly. OpenVAS...
ZoneAlarm Personal Firewall < 6.0.667.000 Multiple Vulnerabilities
Binary data 3227.prm...
CVE-2002-1997
CVE-2002-1997 : ZoneAlarm Pro 3.0 MailSafe is described as allowing remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension. The provided sources confirm this description but do not offer concrete technical ...
CVE-2001-1548
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2001-1548
CVE-2001-1548 affects ZoneAlarm versions 2.1–2.6 and ZoneAlarm Pro 2.4–2.6. The root cause is bypass of filtering by local users through non-standard TCP packets crafted with non-Windows protocol adapters, enabling potential evasion of security controls. The public records describe the vulnerabil...
CVE-2002-1997
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension...
CVE-2002-1911
CVE-2002-1911 affects ZoneAlarm Pro 3.0 and 3.1 when configured to block all traffic. It allows remote attackers to cause a denial of service by sending a large number of SYN packets, leading to CPU and memory consumption. The vendor was not able to reproduce the issue. No further exploit details...
CVE-2002-1911
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service CPU and memory consumption via a large number of SYN packets SYN flood. NOTE: the vendor was not able to reproduce the issue...
CVE-2005-1693
CVE-2005-1693 involves an integer overflow in the Computer Associates Vet Antivirus library used by CA InoculateIT 6.0, eTrust Antivirus (r6.0–7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup r11.1, Vet Antiv...
[Full-disclosure] Computer Associates Vet Antivirus Library Remote Heap Overflow
Date May 23, 2005 Vulnerability Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap...
CVE-2004-1936
Affected software : ZoneAlarm Pro 4.5.538.001 and possibly other versions. Vulnerability : remote attackers can bypass email protection by using attachments whose filenames contain certain non‑English characters. The provided documents do not specify the underlying root cause, exact vectors beyon...
CVE-2004-1936
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters...
ZoneAlarm < 5.5.094.000 Undisclosed Vulnerability (deprecated)
Binary data 2863.prm...
ZoneAlarm < 5.5.062.011 Multiple Vulnerabilities
Binary data 2721.prm...
ZoneAlarm Detection
Binary data 2722.prm...
CVE-2004-1534
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service application instability or system hang via certain JavaScript...
CVE-2004-1534
Vulnerability details (CVE-2004-1534): ZoneAlarm and ZoneAlarm Pro before 5.5.062 with ad-blocking enabled are affected. A remote attacker could trigger a denial of service (application instability or system hang) by exploiting certain JavaScript executed from remote websites. The description and...