Re: ZA Security HoleApr 16 2004 05:55AM Hugo van der Kooij (hvdkooij vanderkooij org)
Re: ZA Security HoleApr 16 2004 04:39AM Pablo G. Sabbatella (pgs kerozene com ar)
Damjan, I have just tested it in Zone Alarm Pro 4.5.538.001 and it
worked exactly as you said it would, its vulnerable . hope they patch
it soon... greets
--
Pablo G. Sabbatella <pgs (at) kerozene.com (dot) ar [email concealed]>
http://www.kerozene.com.ar/
------------- Reply separator ----------------
Wednesday, April 14, 2004, 5:44:50 PM, usted escribió:
DK> Hello!
DK> I think, I discover some kind of security hole in ZoneAlaram - any version.
DK> The problem is hidding in E-mail Protection. Because I'm form Slovenia (not
DK> Slovakia), our alphabet does have some letters with roof (c - è, s - ¹, z -
DK> ¾). And when the name of e-mail attachment contain any of these three
DK> letters, it don't go to the qurarantine (if the attachment do have right
DK> extension of course). I think that can be security threat. From this reason
DK> I write to you. If this is mistake, I'm sorry to steal your time with this
DK> e-mail. And sorry for my bad english :)
worked exactly as you said it would, its vulnerable . hope they patch
it soon... greets
--
Pablo G. Sabbatella <pgs (at) kerozene.com (dot) ar [email concealed]>
http://www.kerozene.com.ar/
------------- Reply separator ----------------
Wednesday, April 14, 2004, 5:44:50 PM, usted escribió:
DK> Hello!
DK> I think, I discover some kind of security hole in ZoneAlaram - any version.
DK> The problem is hidding in E-mail Protection. Because I'm form Slovenia (not
DK> Slovakia), our alphabet does have some letters with roof (c - è, s - ¹, z -
DK> ¾). And when the name of e-mail attachment contain any of these three
DK> letters, it don't go to the qurarantine (if the attachment do have right
DK> extension of course). I think that can be security threat. From this reason
DK> I write to you. If this is mistake, I'm sorry to steal your time with this
DK> e-mail. And sorry for my bad english :)
DK> I write to ZA Labs too, but no answer.
DK> Greets, Damjan
[ reply ]