[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Unsecure file permission of ZoneAlarm pro.

To: Todd Towles <toddtowles@xxxxxxxxxxxxxxx>
Subject: Re: [Full-Disclosure] Unsecure file permission of ZoneAlarm pro.
From: Barry Fitzgerald <bkfsec@xxxxxxxxxxxxxxxx>
Date: Fri, 20 Aug 2004 12:19:52 -0400

Todd Towles wrote:

Sounds like it about as easy to shutdown as Microsoft's SP2 firewall...
Overwrite a file, it fails integrity checks and the firewall will fail
closed. There is something to add to a dropper program.

This by itself would make an effective short-term DoS of a consumer PC.

-Barry


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

References:
- RE: [Full-Disclosure] Unsecure file permission of ZoneAlarm pro.
  - From: Todd Towles

Prev by Date: Re: [Full-Disclosure] RE: [Full-Disclosure]MS should re-write code with security in mind
Next by Date: [Full-Disclosure] RE: [Full-Disclosure]MS should re-write code with security in mind
Previous by thread: RE: [Full-Disclosure] Unsecure file permission of ZoneAlarm pro.
Next by thread: RE: [Full-Disclosure] Unsecure file permission of ZoneAlarm pro.
Index(es):
- Date
- Thread