PT-2008-2284 · Check Point · Check Point Vpn-1 Securemote/Secureclient

Michael Neal Vasquez · Publicado 2008-02-08 · Atualizado 2024-01-25 · CVE-2008-0662

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 SecuRemote/SecureClient NGX versions R56 and R60

Description The issue concerns the Auto Local Logon feature, which caches credentials in a registry key with inadequate permissions, allowing local users to read and reuse these credentials to gain privileges.

Recommendations For versions R56 and R60, consider restricting access to the CheckpointSecuRemote registry key to prevent unauthorized users from reading the cached credentials. As a temporary workaround, disabling the Auto Local Logon feature may help minimize the risk of exploitation until a more permanent solution is available.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2008-0662

Produtos afetados

Check Point Vpn-1 Securemote/Secureclient

Referências · 9

• http://securityfocus.com/bid/27675 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0662 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0475 · Nota
• https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml · Nota
• http://secunia.com/advisories/28820 · Nota
• http://securityfocus.com/archive/1/487735/100/0/threaded · Nota
• http://securityreason.com/securityalert/3627 · Nota
• http://digihax.com · Nota
• http://securitytracker.com/id?1019317 · Nota