Check Point Zone Alarm Srescan.SYS Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID: 23579
Class: Design Error
CVE:
Remote: No
Local: Yes
Published: Apr 20 2007 12:00AM
Updated: Feb 11 2008 09:26PM
Credit: Ruben Santamarta is credited with discovering these issues.
Vulnerable: Zone Labs ZoneAlarm Security Suite 6.5.722
Zone Labs ZoneAlarm Security Suite 6.1.744 .000
Zone Labs ZoneAlarm Security Suite 6.1.737
Zone Labs ZoneAlarm Security Suite 5.5 .062.011
Zone Labs ZoneAlarm Security Suite 5.5 .062
Zone Labs ZoneAlarm Security Suite 5.5
Zone Labs ZoneAlarm Security Suite 5.1
Zone Labs ZoneAlarm Pro 6.0
Zone Labs ZoneAlarm Pro 5.5 .062.011
Zone Labs ZoneAlarm Pro 5.5 .062
Zone Labs ZoneAlarm Pro 5.1
Zone Labs ZoneAlarm Pro 5.0.590 .015
Zone Labs ZoneAlarm Pro 4.5 .538.001
Zone Labs ZoneAlarm Pro 4.5
Zone Labs ZoneAlarm Pro 4.0
Zone Labs ZoneAlarm Pro 3.1
Zone Labs ZoneAlarm Pro 3.0
Zone Labs ZoneAlarm Pro 2.6
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm Pro 2.4
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm Pro 7.0.302.000
Zone Labs ZoneAlarm Pro 6.5.737.000
Zone Labs ZoneAlarm Pro 6.1.744.001
Zone Labs ZoneAlarm Plus 4.5 .538.001
Zone Labs ZoneAlarm Plus 4.0
Zone Labs ZoneAlarm Internet Security Suite 6.0
Zone Labs ZoneAlarm for Windows XP 2.6
Zone Labs ZoneAlarm Antivirus
Zone Labs ZoneAlarm Anti-Virus 6.0
Zone Labs ZoneAlarm Anti-Spyware 6.1
Zone Labs ZoneAlarm Anti-Spyware 6.0
Zone Labs ZoneAlarm 6.0
Zone Labs ZoneAlarm 5.5 .062.011
Zone Labs ZoneAlarm 5.1
Zone Labs ZoneAlarm 4.5 .538.001
Zone Labs ZoneAlarm 4.0
Zone Labs ZoneAlarm 3.7 .202
Zone Labs ZoneAlarm 3.1
Zone Labs ZoneAlarm 3.0
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.6
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.5
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.4
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.3
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.2
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Zone Labs ZoneAlarm 2.1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus