CVE-2001-1549

Tiny Personal Firewall 1.0-2.0 - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-1549. PoCs published by Tom Liston.

AI-analyzed exploit summary This is a writeup describing a design flaw in personal firewalls where outbound packets can bypass filtering by using non-standard protocol adapters. It confirms vulnerabilities in Tiny Personal Firewall, ZoneAlarm, and ZoneAlarm Pro.

Description

Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Tom Liston · textremotewindows
https://www.exploit-db.com/exploits/21169

This is a writeup describing a design flaw in personal firewalls where outbound packets can bypass filtering by using non-standard protocol adapters. It confirms vulnerabilities in Tiny Personal Firewall, ZoneAlarm, and ZoneAlarm Pro.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Tiny Personal Firewall, ZoneAlarm, ZoneAlarm Pro
Auth required
Prerequisites: Administrative privileges on the target system
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3647
Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/7671.php

Scores

EPSS 0.0076
EPSS Percentile 50.8%

Details

Status published
Products (2)
tiny_software/tiny_personal_firewall 1.0
tiny_software/tiny_personal_firewall 2.0
Published Dec 31, 2001
Tracked Since Feb 18, 2026