CVE-2001-1373 describes a vulnerability in Zone Labs ZoneAlarm and ZoneAlarm Pro versions 2.6 and earlier, where the MailSafe feature fails to block prohibited file types if they have long filenames. This oversight allows remote attackers to bypass security measures and send potentially dangerous email attachments to users. The vulnerability is rated Medium severity (CVSS 5.0) with a low attack complexity, requiring no authentication, and primarily impacting integrity by allowing unauthorized content delivery. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this older vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.1CPE matchmatch criteria | cpe:2.3:a:zonelabs:zonealarm:2.1:*:*:*:*:*:*:* | ||
2.2CPE matchmatch criteria | cpe:2.3:a:zonelabs:zonealarm:2.2:*:*:*:*:*:*:* | ||
2.3CPE matchmatch criteria | cpe:2.3:a:zonelabs:zonealarm:2.3:*:*:*:*:*:*:* | ||
2.4CPE matchmatch criteria | cpe:2.3:a:zonelabs:zonealarm:2.4:*:*:*:*:*:*:* | ||
2.4CPE matchmatch criteria | cpe:2.3:a:zonelabs:zonealarm:2.4:*:pro:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.