{"api_version":"1","generated_at":"2026-07-23T09:28:33+00:00","cve":"CVE-2005-2932","urls":{"html":"https://cve.report/CVE-2005-2932","api":"https://cve.report/api/cve/CVE-2005-2932.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-2932","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-2932"},"summary":{"title":"CVE-2005-2932","description":"Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25365","name":"http://www.securityfocus.com/bid/25365","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Check Point Zone Labs Multiple Products Local Privilege Escalation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2007/2929","name":"http://www.vupen.com/english/advisories/2007/2929","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25377","name":"http://www.securityfocus.com/bid/25377","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RETIRED: Check Point ZoneAlarm Multiple Products Local Privilege Escalation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36110","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36110","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26513","name":"http://secunia.com/advisories/26513","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ZoneAlarm Products Insecure Directory Permissions and IOCTL Handler Privilege Escalation - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53","name":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"401 Unauthorized","mime":"text/xml","httpstatus":"401","archivestatus":"200"},{"url":"http://securitytracker.com/id?1018588","name":"http://securitytracker.com/id?1018588","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZoneAlarm Default File Permissions Let Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2932","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2932","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"2932","vulnerable":"1","versionEndIncluding":"7.0.337.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"checkpoint","cpe5":"zonealarm","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2932","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"checkpoint","cpe5":"zonealarm_security_suite","cpe6":"5.5.062.004","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2932","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"checkpoint","cpe5":"zonealarm_security_suite","cpe6":"6.5.737","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:53:29.628Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"26513","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26513"},{"name":"ADV-2007-2929","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2929"},{"name":"zonealarm-acl-privilege-escalation(36110)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36110"},{"name":"20070820 Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584"},{"name":"25365","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25365"},{"name":"1018588","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018588"},{"name":"25377","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25377"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-08-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"26513","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26513"},{"name":"ADV-2007-2929","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2929"},{"name":"zonealarm-acl-privilege-escalation(36110)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36110"},{"name":"20070820 Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584"},{"name":"25365","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25365"},{"name":"1018588","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018588"},{"name":"25377","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25377"},{"tags":["x_refsource_MISC"],"url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-2932","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26513","refsource":"SECUNIA","url":"http://secunia.com/advisories/26513"},{"name":"ADV-2007-2929","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2929"},{"name":"zonealarm-acl-privilege-escalation(36110)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36110"},{"name":"20070820 Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584"},{"name":"25365","refsource":"BID","url":"http://www.securityfocus.com/bid/25365"},{"name":"1018588","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018588"},{"name":"25377","refsource":"BID","url":"http://www.securityfocus.com/bid/25377"},{"name":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53","refsource":"MISC","url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-2932","datePublished":"2007-08-21T17:00:00.000Z","dateReserved":"2005-09-15T00:00:00.000Z","dateUpdated":"2024-08-07T22:53:29.628Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.337.0","matchCriteriaId":"58FAC945-D7DA-4951-9D64-61D88E5D1FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm_security_suite:5.5.062.004:*:*:*:*:*:*:*","matchCriteriaId":"52FEA5E2-4BA9-4B5E-AB26-C6B4E1669DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm_security_suite:6.5.737:*:*:*:*:*:*:*","matchCriteriaId":"8710D833-CD8E-4E44-9770-B784330BEAF2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"2932","Ordinal":"1","Title":"CVE-2005-2932","CVE":"CVE-2005-2932","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"2932","Ordinal":"1","NoteData":"Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.","Type":"Description","Title":"CVE-2005-2932"},{"CveYear":"2005","CveId":"2932","Ordinal":"2","NoteData":"2007-08-21","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"2932","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}