Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
From: Paul Laudanski <zx () castlecops com>
Date: Thu, 29 Sep 2005 17:41:13 -0400 (EDT)

On 29 Sep 2005 warl0ck () linuxmail org wrote:

It is issue with almost all the firewalls
firewalls don't protect the running applications
themselves.I think i don't get is what does it
have to do with DDE ?.Also one can read firewall
ACL from the settings and inject code into the
running trusted process.

This "exploit" was tested by members at CastleCops and found to be untrue:


Snapshots also provided.

Paul Laudanski, Microsoft MVP Windows-Security
CastleCops(SM), http://castlecops.com

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]