Info

Disclosure

Apr 20, 2000

Discovery

Unknown

Dates

Exploit

Apr 20, 2000

Solution

Unknown

Description

ZoneAlarm contains a flaw that may allow a remote attacker to bypass the ruleset. The issue is due to ZoneAlarm not monitoring and alerting UDP traffic with a source port of 53. This allows an attacker to bypass the firewall to reach protected hosts without setting off warnings on the firewall.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation, Misconfiguration
Impact: Loss of Confidentiality
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Security Software

Solution

Upgrade to version 2.1.25 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Zone Labs, Inc.

Zone Alarm

2.0.26

References

Related OSVDB ID: 1294
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2000-04/0145.html
Vendor URL: http://www.zonelabs.com/

Credit

Wally Whacker - whackerhackerwhacker.com - Hacker Whacker

Direct URL: http://osvdb.org/4745