CVE-2005-0114 - vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check

CVE-2005-0114

Summary

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.

References

Vulnerable Configurations

cpe:2.3:a:checkpoint:check_point_integrity_client:4.5.122.000:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:check_point_integrity_client:4.5.122.000:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:check_point_integrity_client:-:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:check_point_integrity_client:-:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:check_point_integrity_client:5.1.556.166:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:check_point_integrity_client:5.1.556.166:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm:5.5.062.011:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm:5.5.062.011:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm_wireless_security:-:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm_wireless_security:-:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm_wireless_security:5.5.080.000:*:*:*:*:*:*:*
cpe:2.3:a:zonelabs:zonealarm_wireless_security:5.5.080.000:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 05-09-2008 - 20:45)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	12531
confirm	http://download.zonelabs.com/bin/free/securityAlert/19.html
idefense	20050211 ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability
secunia	14256

Last major update

05-09-2008 - 20:45

Published

11-02-2005 - 05:00

Last modified

05-09-2008 - 20:45