By TechWeb News

Zone Labs has alerted users that several versions of its personal firewall products are vulnerable to a buffer overflow attack conducted via e-mail that could leave supposedly-protected systems open to malicious code assaults, the company said.

The affected editions include the 4.0 versions of ZoneAlarm, ZoneAlarm Plus, and ZoneAlarm Pro; ZoneAlarm Pro 4.5; and Zone Labs Integrity Client 4.0 and 4.5.

"If successfully exploited, a skilled attacker could cause the firewall to stop processing traffic, execute arbitrary code, or elevate malicious code's privileges," ZoneAlarm said Wednesday in the alert posted on its Web site.

The vulnerability, which was first reported by eEye Digital Security, is caused by an unchecked buffer in Simple Mail Transfer Protocol (SMTP) processing, which could in turn lead to a buffer overflow, said ZoneAlarm. To exploit the vulnerability remotely, the target system must be operating as an SMTP server.

"Zone Labs does not recommend using our client security products to protect servers," the company said. Zone Labs also sells a server-specific firewall under its Integrity line.

ZoneAlarm users were urged to update their software to version 4.5.538.001, while Integrity Client 4.0 and 4.5 users should upgrade to versions 4.0.146.046 and 4.5.085, respectively. More details on the vulnerability and upgrade instructions can be found on the Zone Labs Web site.

http://www.internetweek.com/security02/showArticle.jhtml?articleID=17900009

I detest firewalls, but I have managed to tolerate Sygate for over twelve months now, so it must be worth considering.

Hi, Delgado.  I'm using the Pro version and I can't say I've had any crashes.  Are you using the free version or the Pro version?

Quote from: chorleydave on February 23, 2004, 18:29

Hi, Delgado.  I'm using the Pro version and I can't say I've had any crashes.  Are you using the free version or the Pro version?

   Ive tried both- same problem! It seems to be OK with older versions, but it is no good with updated one. A long time ago I had a Cracked version. Now if I install the Pro Version it picks up the details of registration etc from somewhere-dont know where, because I do countless registry cleans.
   

 

If it was cracked does it mean it was broken   and thats why its picking it up  

Hi Delgado, I assume that the cracked version was a trial version with a patch or a serial number that you added later ?
Some programs that are installed initially as a trial "hide" information all over the place, making it almost impossible to remove all traces of it.
Then when you reinstall it it knows that it has been on your PC before and thinks that you are trying to get an extended trial.
You are then stuck with that until you wipe your drive completely.
I cant understand why its not letting you use the genuine paid for version though, as it should recognise that it isnt an extension of the trial and install as normal  
 

Thanks for your comments. Yes the programme that I installed originally came with an activation serial number that I got from a dubious web site. This worked a treat with a trial version download. Then I had the latest update and everything went awol. Now I cant even use the free version unless I go back to an old version. Must be something hidden as you say, anyway coming up for new larger drive installation, so might try again once everything is clean. The message I get is "Sygate Personal Firewall has encountered a problem, and has to close"