CVE-2004-0612: Medium severity Zonelabs ZoneAlarm vulnerability
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0612?
CVE-2004-0612 is considered to be a moderate severity vulnerability due to the potential for mobile code to bypass filtering within SSL sessions.
How does CVE-2004-0612 affect users of ZoneAlarm Pro 5.0.590.015?
CVE-2004-0612 allows remote attackers to bypass mobile code filtering, which can lead to unauthorized code execution on affected systems.
Is CVE-2004-0612 specific to certain versions of ZoneAlarm?
Yes, CVE-2004-0612 specifically affects ZoneAlarm Pro version 5.0.590.015.
How do I fix CVE-2004-0612?
The recommended fix for CVE-2004-0612 is to update to a newer version of ZoneAlarm that addresses this vulnerability.
Can I still use ZoneAlarm Pro 5.0.590.015 if CVE-2004-0612 is present?
While you can continue using ZoneAlarm Pro 5.0.590.015, it is advised to implement updates or alternative measures to mitigate the risks associated with CVE-2004-0612.