Description
Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17099 ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html ↗
- http://www.osvdb.org/9761 ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html ↗