ZoneAlarm Security Advisory

Quote:

---

ZoneAlarm Security Advisory
A security vulnerability exists in specific versions of ZoneAlarm®, ZoneAlarm Pro, ZoneAlarm Plus and the Zone Labs Integrity™ client. This vulnerability is caused by an unchecked buffer in Simple Mail Transfer Protocol (SMTP) processing which could lead to a buffer overflow. In order to exploit the vulnerability without user assistance, the target system must be operating as an SMTP server. Zone Labs does not recommend using our client security products to protect servers.

Upgrading an affected Zone Labs product will remove this vulnerability.

---

Patch time!

Yup,

I already grabed that, but always think it's funny when a security program has a flaw. Yes, i know that no one is perfect, its just kinda ironic, thats all :p

UPDATE: A FREE WORK AROUND : You can directly download the latest FULL installation of your ZoneLab version and use its UPGRADE function to update your previously registered version. It will preserve your previous registration info and configurations. It worked for me ;) Here are the respective links over at MajorGeeks :

ZoneAlarm Free 4.5.538.001 http://www.majorgeeks.com/download388.html
ZoneAlarm Pro 4.5.538.001 http://www.majorgeeks.com/download2671.html
ZoneAlarm Plus 4.5.538.001 http://www.majorgeeks.com/download744.html

Oh darn, I upgraded before I knew about the vulnerability. Thanks for blowing my whole day.....lol

Actually I don't believe the 4.5.538 version had been out for very long. Seems like I installed it only a little while ago. So I patched a patch with 4.5.538.001


Anyway, thanks for the thread and links

Relyt

Just checked my "updates" folder:

#538: 27th January
#538.001: 19th February

Thanks for the heads up

:)

"Zone Labs does not recommend using our client security products to protect servers."

LOL. Ya think?
this is why I like hardware firewalls a lot more.
I personally run a netopia R910 and love it :)
used to use a linksys, but found out that whenever a serious amount of traffic was sent to my servers it choked...and needed a reset.

I just went wireless with my firewall/router and Im loving it...sucha great thing to have online access outside of my house, and to be able to 128bit secure it as well...knock on wood, so far so good. netgear hasnt done me wrong, yet.

just watch those logs...make sure no ones getting a free look at the network behind the firewall... once you connect wireless, you are hitting the router part.... and it is considered inside access.