CVE-2001-1373: Medium severity Zonelabs ZoneAlarm vulnerability
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1373?
CVE-2001-1373 has been classified with a moderate severity level due to the potential for remote attackers to exploit the vulnerability.
How do I fix CVE-2001-1373?
To fix CVE-2001-1373, immediately update ZoneAlarm to the latest version where this vulnerability is addressed.
What versions of ZoneAlarm are affected by CVE-2001-1373?
CVE-2001-1373 affects ZoneAlarm versions 2.1, 2.2, 2.3, 2.4, 2.5, and 2.6, including both standard and Pro editions.
What does CVE-2001-1373 exploit in ZoneAlarm?
CVE-2001-1373 exploits the failure of MailSafe to block prohibited file types with long file names, allowing unsafe attachments.
Is there a workaround for CVE-2001-1373 if I cannot update ZoneAlarm?
There is no official workaround for CVE-2001-1373, and the best protection is to update ZoneAlarm to a safe version.