Vulnerability Details CVE-2001-1373
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 71.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/archive/1/197681
- http://www.securityfocus.com/bid/3055
- http://www.zonelabs.com/products/zap/rel_history.html#2.6.362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6877
- http://www.securityfocus.com/archive/1/197681
- http://www.securityfocus.com/bid/3055
- http://www.zonelabs.com/products/zap/rel_history.html#2.6.362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6877
Products affected by CVE-2001-1373
-
cpe:2.3:a:zonelabs:zonealarm:2.1
-
cpe:2.3:a:zonelabs:zonealarm:2.2
-
cpe:2.3:a:zonelabs:zonealarm:2.3
-
cpe:2.3:a:zonelabs:zonealarm:2.4
-
cpe:2.3:a:zonelabs:zonealarm:2.5
-
cpe:2.3:a:zonelabs:zonealarm:2.6