CVE-2001-1373
First published: Wed Jul 18 2001(Updated: )
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Alarm | =2.1 | |
| Alarm | =2.2 | |
| Alarm | =2.3 | |
| Alarm | =2.4 | |
| Alarm | =2.4 | |
| Alarm | =2.5 | |
| Alarm | =2.6 | |
| Alarm | =2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2001-1373?
CVE-2001-1373 has been classified with a moderate severity level due to the potential for remote attackers to exploit the vulnerability.
How do I fix CVE-2001-1373?
To fix CVE-2001-1373, immediately update ZoneAlarm to the latest version where this vulnerability is addressed.
What versions of ZoneAlarm are affected by CVE-2001-1373?
CVE-2001-1373 affects ZoneAlarm versions 2.1, 2.2, 2.3, 2.4, 2.5, and 2.6, including both standard and Pro editions.
What does CVE-2001-1373 exploit in ZoneAlarm?
CVE-2001-1373 exploits the failure of MailSafe to block prohibited file types with long file names, allowing unsafe attachments.
Is there a workaround for CVE-2001-1373 if I cannot update ZoneAlarm?
There is no official workaround for CVE-2001-1373, and the best protection is to update ZoneAlarm to a safe version.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/zonelabs
- canonical/alarm
- version/alarm/2.1
- version/alarm/2.2
- version/alarm/2.3
- version/alarm/2.4
- version/alarm/2.5
- version/alarm/2.6