CVE-2002-1911 ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE:....
MediumCVSS 5.0
EPSS 3.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE: the vendor was not able to reproduce the issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 3.0 | No fix listed |
| zonelabs zonealarm | = 3.1 | No fix listed |
References
- 20021017 Re: NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability mailing-list
- zonealarm-synflood-dos(10379) vdb-entry
- 20021016 NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability mailing-list
- 5975 exploit vdb-entry