high7.5Public exploit code
CVE-2000-0339
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 672000-04-24 · remote · windows · Verified
Impact
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zonelabs | Zonealarm | through 2.2.10 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/1294
- http://www.securityfocus.com/bid/1137
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com
- http://www.osvdb.org/1294
- http://www.securityfocus.com/bid/1137
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com