Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
ZoneAlarm Firewall Can Be Bypassed
ZoneAlarm firewall can be bypassed by using interprocess communication (IPC) and direct data exchange (DDE).
ITPro Today
September 29, 2005
1 Min Read
ReportedSeptember 28, 2005 by Debasis Mohanty
VERSIONSAFFECTED
ZoneAlarmFirewall, free versions |
DESCRIPTION
ZoneLabs' ZoneAlarm firewall can be bypassed by using Dynamic DataExchange (DDE) and interprocess communications (IPC). A maliciousprogram could gain access beyond the firewall through IPC-DDE and atrusted program that's allowed access through the firewall.
VENDORRESPONSE
ZoneLabs reports that only free versions of ZoneAlarm firewall areaffected because they lack Advanced Program Control, which is foundin ZoneAlarm Pro, ZoneAlarm AntiVirus, ZoneAlarm Wireless Security,and ZoneAlarm Security Suite. Users of products with Advanced Program Control should ensure that it is enabled in order to defendagainst these types of attacks. All ZoneAlarm users, including users ofthe free version, should also ensure that they have the latestversion of the products installed.
About the Author(s)
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
_(1).png?width=700&auto=webp&quality=80&disable=upscale)
.png?width=700&auto=webp&quality=80&disable=upscale)