CVE-2001-1548 ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
LowCVSS 2.1
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 2.1 | No fix listed |
| zonelabs zonealarm | = 2.2 | No fix listed |
| zonelabs zonealarm | = 2.3 | No fix listed |
| zonelabs zonealarm | = 2.4 | No fix listed |
| zonelabs zonealarm | = 2.5 | No fix listed |
| zonelabs zonealarm | = 2.6 | No fix listed |
References
- 20011205 Flawed outbound packet filtering in various personal firewalls exploit mailing-list vendor-advisory
- 20011206 Re: Flawed outbound packet filtering in various personal firewalls mailing-list
- zonealarm-tiny-bypass-filter(7671) vdb-entry
- 3647 exploit vdb-entry