CVE-2005-2932

Related Files

iDEFENSE Security Advisory 2007-08-20.1

Posted Aug 21, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 08.20.07 - Local exploitation of an insecure permission vulnerability in multiple Check Point Zone Labs products allows attackers to escalate privileges or disable protection. The vulnerability specifically exists in the default file Access Control List (ACL) settings that are applied during installation. When an administrator installs any of the Zone Labs ZoneAlarm tools, the default ACL allows any user to modify the installed files. Some of the programs run as system services. This allows a user to simply replace an installed ZoneAlarm file with their own code that will later be executed with system-level privileges. iDefense has confirmed the existence of this vulnerability in ZoneAlarm Security Suite 5.5.062.004 and 6.5.737. It is strongly suspected that other versions of ZoneAlarm and other Zone Labs products are affected by this.

tags | advisory, local

advisories | CVE-2005-2932

SHA-256 | 3d1f6f4fe80e426ec6f27502fec65aa8e3f7be5b84386789434306842ffdc90e

Download | Favorite | View