CVE-2001-1373 MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous att...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 2.1 | No fix listed |
| zonelabs zonealarm | = 2.2 | No fix listed |
| zonelabs zonealarm | = 2.3 | No fix listed |
| zonelabs zonealarm | = 2.4 | No fix listed |
| zonelabs zonealarm | = 2.5 | No fix listed |
| zonelabs zonealarm | = 2.6 | No fix listed |
References
- 20010718 ZoneAlarm Pro mailing-list
- 3055 vdb-entry vendor-advisory
- www.zonelabs.com
- zonealarm-bypass-mailsafe(6877) vdb-entry