Life Jacket Flourescent Pink

Vulnerability multiple personal firewalls

Not everything is secure firewall

By Angela Ruiz
angela@videosoft.net.uy <10 )


is a generic problem that affects many types of personal firewalls. They are vulnerable almost all products that accept shortcuts or provide an interface that can be enabled with a click without requiring passwords for actions such as activating a program as a server, run other programs, etc. <
been shown to bypass these firewalls is simple with a program of multiple concurrent processes and sending key codes, or by controlling the mouse. There are many proofs of concept published in this regard.

This weakness can enable any Trojan or similar code to easily circumvent the firewall control.
<< a_x2;

the following products are vulnerable:

- Agnitium Outpost Firewall (all versions)
- Kaspersky Anti-Hacker (all versions)
- Kerio (all versions)
- Look 'n' Stop (all versions) - Omniquad Personal Firewall (all versions) - Panda Platinum Internet Security (all versions) - Symantec's Norton Personal Firewall (all versions) - ZoneAlarm 4.5 and earlier - ZoneAlarm Pro 4.5 and earlier are not vulnerable

:

- Microsoft Windows Firewall (ICF) Windows XP

- ZoneAlarm 5.x and above - ZoneAlarm Pro 5 . xy

higher
Other firewall untested, could also be vulnerable.