admin
09-04-2003, 12:59 AM
ZoneAlarm was found vulnerable to a serious vulnerability leading to a remote Denial Of Service condition due to failure to handle udp random packets, if an attacker sends multiple udp packets to multiple ports 0-65000, the machine will hang up until the attacker stop flooding. The following is a remote test done under ZoneAlarm version 3.7.202 running on windows xp home edition. on irc test1 joined running ZoneAlarm version 3.7.202 with default installation