Re: Bypassing ZoneAlarm (limited)

From: Te Smith (tsmithat_private)
Date: Mon Jun 30 2003 - 18:39:32 PDT

  • Next message: Vade 79: "ezbounce[v1.0-(1.04a/1.50pre6)]: remote format string exploit."

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <20030623061246.7134.qmailat_private>
    
    The posting describes test results using older versions of Zone Labs’ 
    ZoneAlarm and also erroneously attributes the problem to a flawed core 
    design.  
    
    Zone Labs’ Advanced Program Control feature protects PCs from the 
    ShellExecute theoretical exploit.  This feature is available in all Zone 
    Labs’ advanced consumer security products, as well as Zone Labs’ 
    enterprise security product, Integrity.  Advanced Program Control protects 
    against this theoretical exploit and others which attempt to bypass the 
    firewall’s trusted application permissions.  
    
    Zone Labs recommends that users run Program Control at the 
    default ‘medium’ setting for about a week so that the software 
    will ‘learn’ each program that is used for Internet access.  After a week, 
    configure Program Control at the high setting.  At that point, users will 
    only be prompted with an Alert if there is a problem.  As a result, users 
    get full protection against the ShellExecute theoretical exploit.  Zone 
    Labs is always working on improving these and other features to make them 
    easy-to-use and intuitive for all users, no matter their skill level.
    
    Zone Labs first introduced the Advanced Program Control feature in 
    November, 2002 with the release of ZoneAlarm Pro 3.5.  Zone Labs added 
    this feature to Integrity at the same time and then added it to ZoneAlarm 
    Plus in February, 2003.    Zone Labs recommends that all users keep their 
    security products up-to-date at all times.   
    
    We have continually hardened security in our free ZoneAlarm, as we do with 
    all our releases, but we do not include all advanced features in this 
    basic product.
    
    More information can be found through our technical support FAQs. 
    
    Te Smith
    Sr. Director, Corporate Communications
    Zone Labs
    tsmithat_private
    



    This archive was generated by hypermail 2b30 : Tue Jul 01 2003 - 14:04:51 PDT