VERSIONS AFFECTED
ZoneAlarm Firewall, free versions
DESCRIPTION
Zone Labs' ZoneAlarm firewall can be bypassed by using Dynamic Data Exchange (DDE) and interprocess communications (IPC). A malicious program could gain access beyond the firewall through IPC-DDE and a trusted program that's allowed access through the firewall.
VENDOR RESPONSE
Zone Labs reports that only free versions of ZoneAlarm firewall are affected because they lack Advanced Program Control, which is found in ZoneAlarm Pro, ZoneAlarm AntiVirus, ZoneAlarm Wireless Security, and ZoneAlarm Security Suite. Users of products with Advanced Program Control should ensure that it is enabled in order to defend against these types of attacks. All ZoneAlarm users, including users of the free version, should also ensure that they have the latest version of the products installed.
ZoneAlarm Firewall, free versions
DESCRIPTION
Zone Labs' ZoneAlarm firewall can be bypassed by using Dynamic Data Exchange (DDE) and interprocess communications (IPC). A malicious program could gain access beyond the firewall through IPC-DDE and a trusted program that's allowed access through the firewall.
VENDOR RESPONSE
Zone Labs reports that only free versions of ZoneAlarm firewall are affected because they lack Advanced Program Control, which is found in ZoneAlarm Pro, ZoneAlarm AntiVirus, ZoneAlarm Wireless Security, and ZoneAlarm Security Suite. Users of products with Advanced Program Control should ensure that it is enabled in order to defend against these types of attacks. All ZoneAlarm users, including users of the free version, should also ensure that they have the latest version of the products installed.
Vastaukset 6
Vanhimmat
Kyllä SP2:n palomuuri suojaa. Jos ette usko niin testatkaa Mikkisoftia:
http://www.grc.com/x/ne.dll?bh0bkyd2
http://scan.sygate.com/
http://www.pcflank.com/
pitää ulkonta sisään mutta ei sisältä ulos en suosittele
valvooko sitä liikennettä?
tuo tieto. Pitäsi pistää linkki, jotta pääsisi itse lukemaan ja arviomaan asiaa.
September 28, 2005 by Debasis Mohanty
Esim. SecurityFocus kertoo aika hyvin eri bugeista...
http://www.securityfocus.com/bid/14966