CVEvulnerability
CVE-2005-2932
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
Affected configurations
• checkpoint zonealarm (<= 7.0.337.0)
• checkpoint zonealarm security suite 5.5.062.004
• checkpoint zonealarm security suite 6.5.737
Related
Weakness · not in database (1)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584 Vendor Advisory
- http://secunia.com/advisories/26513 Vendor Advisory
- http://securitytracker.com/id?1018588 securitytracker.com
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53 www.reversemode.com
- http://www.securityfocus.com/bid/25365 www.securityfocus.com
- http://www.securityfocus.com/bid/25377 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2929 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36110 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584 Vendor Advisory
- http://secunia.com/advisories/26513 Vendor Advisory
- http://securitytracker.com/id?1018588 securitytracker.com
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53 www.reversemode.com
- http://www.securityfocus.com/bid/25365 www.securityfocus.com
- http://www.securityfocus.com/bid/25377 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2929 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36110 exchange.xforce.ibmcloud.com