[prev in list] [next in list] [prev in thread] [next in thread]
List: bugtraq
Subject: Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
From: Paul Laudanski <zx () castlecops ! com>
Date: 2005-09-29 21:41:13
Message-ID: Pine.LNX.4.44.0509291739390.20199-100000 () bugsbunny ! castlecops ! com
[Download RAW message or body]
On 29 Sep 2005 warl0ck@linuxmail.org wrote:
> It is issue with almost all the firewalls
> firewalls don't protect the running applications
> themselves.I think i don't get is what does it
> have to do with DDE ?.Also one can read firewall
> ACL from the settings and inject code into the
> running trusted process.
This "exploit" was tested by members at CastleCops and found to be untrue:
http://castlecops.com/postlite134369-.html
Snapshots also provided.
--
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops(SM), http://castlecops.com
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic