Description
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
References
- 26513 third-party-advisory
- ADV-2007-2929 vdb-entry
- zonealarm-acl-privilege-escalation(36110) vdb-entry
- 20070820 Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability third-party-advisory
- 25365 vdb-entry
- 1018588 vdb-entry
- 25377 vdb-entry
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53