ZoneLabs Won't Fix Hole In Free Firewall

[Fuelm@n]

http://story.news.yahoo.com/news?tmp...01/tc_zd/44172

[Rainbow32]

Well gee, we wouldn't want this information to get out to the hackers.

[markp62]

Sygate Personal for free gives the same protection concerning allowing Dynamic Link Libraries as the mentioned ZA Pro paid for yearly for those concerned about this.
Kerio Personal would also be affected by this.

[jstnomega]

Now they say they will fix the fw vulnerability.

http://www.extremetech.com/article2/...1179181,00.asp

"Zone Labs will make a fix for its free ZoneAlarm product available in the next two weeks," the company said, in a statement that was also published to the BugTraq list late Wednesday night.

I'm wondering if it will be backwards compatible w/older ver's. I prefer & use ver 2.6.88. We'll see soon enough, I guess.

[ecrosson]

I have been hearing so much negative feedback about the later versions of Zonealarm, and the problems it has caused so many.
Is this really the case, or is there some other factor involved with the issues? I have been using the 3.7.159 version for months now, and have not yet had any issues with it. The interface takes some getting used to, but it then is the same product underneath, and is extremely effective at what it does, just like the previous version have been.
Are there really that many problems with it, or is this just a case of the new kid on the block not being trusted with the keys?

I know this is a bit off the topic, but I just had to ask about this matter.. Thanks for your patience.

[Fuelm@n]

...is this just a case of the new kid on the block not being trusted with the keys?

I've used ZoneAlarm before there was even a Pro version. Once they went Pro, so did I. I've used every version of the Pro, from 1-4. I didn't start having problems with ZAP till version 3. I do currently run version 4 on my XP system with some minor problems, on my system running 2k, I have major problems.

[VerLux]

While I've never had a problem using it, ZoneAlarm is somewhat derided by those who have more networking technical expertise than me, and considerably more than the average computer user (those for whom ZA is intended), for various reasons. But I think the headline is unfair to ZA, since it is a problem within Windows that can be exploited rather than a problem with ZA and very, very difficult to replicate.

Originally posted by Rainbow32
Well gee, we wouldn't want this information to get out to the hackers.

lol. I'm sure the hacker underground knew about it long before the company did. And one of the basic tenets of being a hacker is freedom of information.

Fuelm@n, I have problems with network-based applications with 2k & XP as well that I didn't have with 98. Hmm. :\

[AnnMarie]

Looks like ZA changed their mind - see post by Tweaker here

[Dickster]

New information here. Looks like the patch is coming after all.

[Fuelm@n]

Just an FYI for any ZoneAlarm users. There is a ZoneAlarm forum available @ http://forums.zonelabs.com/zonelabs maybe someone here can get their ZA issues answered. hth

[Fuelm@n]

ZoneAlarm "flaw" is a bunch of hooey

[VerLux]

Originally posted by Fuelm@n
ZoneAlarm "flaw" is a bunch of hooey

Agreed. This was an attempt to make them look bad. Wonder why someone would do that.

http://www.securityfocus.com/archive/1/326371

I thing that this is flaw in the core design of ZoneAlarm
(and/or Windows) and don't see a way it can be fixed.

[Welshjim]

As Fuelman suggested, Zone Alarm says the problem is with Windows/Internet Explorer but that you are protected with a ZA firewall.
http://www.zonelabs.com/store/conten...p?lid=home_box
Bottom Line: No patch needed from ZA.
P.S. I am not aware of a patch from MS dated 7/16 as mentioned by ZA, but there is this one dated 7/11 (which I was offered on 7/9 by Windows Update)
http://support.microsoft.com/?kbid=823559