CVE-2001-1548

ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

ZoneAlarm Pro Local Internet not only Locally!

ZoneAlarm Pro is firewall for Windows home-users. The following was tested with ZoneAlarm Pro latest version: 2.6.357 Im not sure if it also works with the free version but I can't imagine why it wouldn't. Similair to Internet Explorer ZoneAlarm Pro ZAP has security settings for Local and Interne...

CVE-2001-0682

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting...

PT-2001-1865 · Check Point · Zonealarm Pro +1

Name of the Vulnerable Software and Affected Versions: ZoneAlarm and ZoneAlarm Pro affected versions not specified Description: The issue allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object, which prevents ZoneAlarm from starting...

ZoneAlarm Pro's MailSafe

hi2all MailSafe is a feature on ZoneAlarm Pro http://www.zonelabs.com that identifies in e-mail attachments potentially harmful files ex: .exe, .com, .reg, .vbs or others that can be added in this feature configuration, and renames their extension to .zl; at the same time it can show an alarm box...

Переполнение буфера в ZoneAlarm Pro's MailSafe (buffer overflow)

Переполнение буфера при разборе файла с длинным именем...

CVE-2001-1373

MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments...

Дырки в ZoneAlarm

Не обнаруживается несклько распространенных атак, кроме того создается разделяемый ресурс и записи в регистре со слабыми разрешениями...

Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

CVE-2000-0339

ZoneAlarm Personal Firewall (Windows) versions 2.1.10 and earlier fail to monitor UDP traffic with a source port of 67, allowing remote attackers to bypass firewall rules. This vulnerability (CVE-2000-0339) is documented by OpenVAS/Nessus entries noting a bypass of the ruleset and recommending up...

CVE-2000-0339

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules...

CVE-2000-0339

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates from source port 67 on the attacking host the ZoneAlarm...

CVE-2000-0220

ZoneAlarm is reported to send sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. The PT-2000-1202 entry attributes the vulnerability to ZoneAlarm (affected versions not specified) and reiterates that the issue involv...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

PT-2000-1202 · Zone · Zonealarm

Name of the Vulnerable Software and Affected Versions: ZoneAlarm affected versions not specified Description: The issue concerns ZoneAlarm sending sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. Recommendations: A...

MS08-066: Vulnerability in the Microsoft Ancillary Function driver could allow elevation of privilege

None None...