CVE-2005-2932
First published: Sat Dec 31 2005(Updated: )
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Alarm | <=7.0.337.0 | |
| ZoneAlarm Security Suite | =5.5.062.004 | |
| ZoneAlarm Security Suite | =6.5.737 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53
- http://www.securityfocus.com/bid/25365
- http://www.securityfocus.com/bid/25377
- http://securitytracker.com/id?1018588
- http://secunia.com/advisories/26513
- http://www.vupen.com/english/advisories/2007/2929
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36110
Frequently Asked Questions
What is the severity of CVE-2005-2932?
CVE-2005-2932 is considered a high severity vulnerability due to the potential for local users to gain privileges.
How do I fix CVE-2005-2932?
To fix CVE-2005-2932, update the affected Check Point Zone Labs ZoneAlarm products to version 7.0.362 or later.
Which ZoneAlarm products are affected by CVE-2005-2932?
CVE-2005-2932 affects multiple ZoneAlarm products including Security Suite versions 5.5.062.004 and 6.5.737, as well as versions prior to 7.0.362.
What kind of attack does CVE-2005-2932 allow?
CVE-2005-2932 allows local users to bypass security controls or escalate their privileges due to insecure default permissions.
Is CVE-2005-2932 easy to exploit?
Yes, CVE-2005-2932 is relatively easy to exploit for local users familiar with the environment.
- agent/type
- agent/references
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/checkpoint
- canonical/alarm
- version/alarm/7.0.337.0
- canonical/zonealarm security suite
- version/zonealarm security suite/5.5.062.004
- version/zonealarm security suite/6.5.737