Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-2713 | First vendor Publication | 2004-12-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:M/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 1.9 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 3.4 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2713 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : ZoneAlarm Pro local DoS File : nvt/zone_alarm_local_dos.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 9761 | ZoneAlarm Pro Configuration File/Directory Permission Weakness DoS Zone Alarm Pro contains a flaw that may allow a local denial of service. The issue is due to Zone Alarm Pro setting the configuration file/folder permissions for %windir%\Internet Logs\* to Everyone:Full Control. This allows any local user to make changes to the Zone Alarm configuration file. While the changes to the configuration are not processed by the server, the changes to the file trigger it's built in protection to prevent running with untrusted options and causes the firewall to shut down. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2004-09-15 | Name : This host is running a firewall with a denial of service vulnerability. File : zone_alarm_local_dos.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:49 |
|
| 2024-11-28 12:06:37 |
|
| 2024-08-08 09:28:14 |
|
| 2024-05-17 09:28:45 |
|
| 2024-05-14 21:28:32 |
|
| 2024-04-11 09:28:48 |
|
| 2024-03-21 09:28:51 |
|
| 2023-11-07 21:48:09 |
|
| 2021-05-04 12:02:40 |
|
| 2021-04-22 01:02:52 |
|
| 2020-05-23 00:16:13 |
|
| 2017-07-29 12:01:21 |
|
| 2016-06-28 15:13:54 |
|
| 2014-02-17 10:29:33 |
|
| 2013-05-11 11:49:46 |
|
