Zone Labs ZoneAlarm Syn Flood Denial Of Service Vulnerability
BID:5975
Info
Zone Labs ZoneAlarm Syn Flood Denial Of Service Vulnerability
| Bugtraq ID: | 5975 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2002 12:00AM |
| Updated: | Oct 16 2002 12:00AM |
| Credit: | Vulnerability discovery credited to Abraham Lincoln <[email protected]>. |
| Vulnerable: |
Zone Labs ZoneAlarm Pro 3.1 Zone Labs ZoneAlarm Pro 3.0 |
| Not Vulnerable: | |
Discussion
Zone Labs ZoneAlarm Syn Flood Denial Of Service Vulnerability
ZoneAlarm is a firewall software package designed for Microsoft Windows operating systems. It is distributed and maintained by Zone Labs.
ZoneAlarm does not properly handle some types of traffic. When ZoneAlarm is configured to block all traffic, and a Syn flood of 300 or more packets is sent to a host running the vulnerable software, the system becomes unstable. This problem has been reported as leading to a denial of service condition.
ZoneAlarm is a firewall software package designed for Microsoft Windows operating systems. It is distributed and maintained by Zone Labs.
ZoneAlarm does not properly handle some types of traffic. When ZoneAlarm is configured to block all traffic, and a Syn flood of 300 or more packets is sent to a host running the vulnerable software, the system becomes unstable. This problem has been reported as leading to a denial of service condition.