bugtraq - ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <44A94BDE.3090905@matousec.com>
Date: Mon, 03 Jul 2006 18:54:54 +0200
From: David Matousek <david@...ousec.com>
To: bugtraq@...urityfocus.com
Subject: ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum'
 Vulnerability


ZoneAlarm insufficiently checks calling standard Windows API functions RegSaveKey, RegRestoreKey and RegDeleteKey.

The whole advisory with more details is available here
http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-protection-of-registry-key-VETFDDNT-Enum.php

Regards,

-- 
David Matousek

Founder and Chief Representative of matousec.com