CVE-2000-0339

Description

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.

Affected products

• zonelabs / zonealarm2.2.10

References

• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com
• MISChttp://www.osvdb.org/1294
• MISChttp://www.securityfocus.com/bid/1137