Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Internet Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=25)
-   -   zonealarm vulnerabilty 'wont be fixed' (https://www.cableforum.uk/board/showthread.php?t=632)

kronas 02-07-2003 17:22

zonealarm vulnerabilty 'wont be fixed'
 
zonelabs the makers of the popular free software firewall are refusing to fix a vulnerabilty in its zonealarm firewall by saying 'its a problem with windows not the program itself'

using the shell32.dll found in windows a malicious hacker would have to load a trojan on the victims pc and lure the firewall in to accepting the command using the windows shell32.dll file

also a poster on the bugtraq network has claimed the $39.95 version of zonealarm has better protection as you can control anything that acesses the internet

zonelabs has said that it is not a serious flaw it would require a skilled hacker in order to execute such action rather then your average 'script kiddie'

http://www.extremetech.com/article2/...1167027,00.asp

El Diablo 02-07-2003 18:06

Quote:

Originally posted by kronas

zonelabs has said that it is not a serious flaw it would require a skilled hacker in order to execute such action rather then your average 'script kiddie'

Hahaha... muppets! :dozey:
... security wouldn't exist without paranoia :devsmoke:

Quote:

From http://www.extremetech.com/article2...,1167027,00.asp
it would require the hacker equivalent of "brain surgery" to exploit.
It's all a marketing ploy... pay top dollar for our full product and get all the benefits!! :eek:

darkangel 02-07-2003 19:33

not the first time zone alarm has had serious security flaws, never found zone alarm to work 100% and have never seen it work at all without true vector errors

hobbie 02-07-2003 23:05

nods in agreement with darkangel --the true vector engine caused loads of probs for me. I now have Sygate firewall, which is free, and has passed every test at sites like pcpitstop etc

darkangel 02-07-2003 23:17

Quote:

Originally posted by hobbie
nods in agreement with darkangel --the true vector engine caused loads of probs for me. I now have Sygate firewall, which is free, and has passed every test at sites like pcpitstop etc
use sygate pro myself not caused me any problems yet i've tried them all so far and sygate is the only 1 i'd recommend

Martin 02-07-2003 23:42

There's always something someone can exploit:( No wonder us mere users get paranoid!!

kronas 05-07-2003 00:43

update

zonelabs will be releasing a patch to fix the loophole in the next 2 weeks they retracted there earlier refusal

http://www.extremetech.com/article2/...1179181,00.asp


All times are GMT. The time now is 18:53.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum