CVE-2002-1997 ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 3.0 | No fix listed |
References
- 20020402 Various Vulnerabilities in ZoneAlarm MailSafe mailing-list
- 4407 vdb-entry
- zonealarm-mailsafe-dot-bypass(8744) vdb-entry