CVE Catalog

CVE-2000-0339

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.26%

94th percentile - higher than 94% of all known CVEs

Summary

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, allowing remote attackers to bypass firewall rules.

Risk Assessment

Attackers can exploit this vulnerability to perform unauthorized actions on the network, posing a serious security threat to the organization.

Recommendation

It is recommended to update ZoneAlarm to the latest version to mitigate this security vulnerability.

Original NVD description (English source)

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS