CVE-2005-0114
Low
Description
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.
SeverityLow
CVSS2.1
Exploit probability—
ProductCheckpoint Check Point Integrity Client
PublishedFeb 11, 2005
First seenFeb 11, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint check_point_integrity_client | v ≤ 5.1.556.166, 4.5.122.000 | — |
| zonelabs zonealarm | 5.5.062.011 | — |
| zonelabs zonealarm_wireless_security | v ≤ 5.5.080.000 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.