CVE-2000-0339

Description

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.

Affected products

• zonelabs / zonealarm2.2.10

Exploits & proofs of concept

• exploit-dbZone Labs ZoneAlarm 2.1 Personal Firewall - Port 67by Wally Whacker

References

• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com
• MISChttp://www.osvdb.org/1294
• MISChttp://www.securityfocus.com/bid/1137