CVE

Id
11139  
CVE No.
CVE-2004-2713  
Status
Candidate  
Description
** DISPUTED ** Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%Internet Logs* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file.  
Phase
Assigned (20071006)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78457 11139 CVE-2004-2713 BUGTRAQ:20040825 Check Point - Zone Labs Division - Response to "Weak Default Permissions Vulnerability"  View
78458 11139 CVE-2004-2713 URL:http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html  View
78459 11139 CVE-2004-2713 FULLDISC:20040819 Unsecure file permission of ZoneAlarm pro.  View
78460 11139 CVE-2004-2713 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html  View
78461 11139 CVE-2004-2713 FULLDISC:20040820 Re: Unsecure file permission of ZoneAlarm pro.  View
78462 11139 CVE-2004-2713 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html  View
78463 11139 CVE-2004-2713 FULLDISC:20040821 Re: Unsecure file permission of ZoneAlarm pro.  View
78464 11139 CVE-2004-2713 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html  View
78465 11139 CVE-2004-2713 OSVDB:9761  View
78466 11139 CVE-2004-2713 URL:http://www.osvdb.org/9761  View
78467 11139 CVE-2004-2713 XF:zonealarm-insecure-file-permission(17099)  View

Related JVN