PT-2011-4011 · Check Point · Check Point Multi-Domain Management / Provider-1+1

Publicado 2011-07-08 · Atualizado 2017-08-29 · CVE-2011-2664

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Multi-Domain Management / Provider-1 versions R65 through R75 Check Point SmartCenter (affected versions not specified)

Description The issue allows local users on the MDS system to overwrite arbitrary files via unknown vectors during installation on non-Windows machines.

Recommendations For Check Point Multi-Domain Management / Provider-1 versions R65 through R75, consider restricting access to the installation process on non-Windows machines until a fix is available. For Check Point SmartCenter, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2011-2664

Produtos afetados

Check Point Multi-Domain Management / Provider-1

Check Point Smartcenter

Referências · 5

• http://secunia.com/advisories/45231 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2664 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68502 · Nota
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk63565 · Aviso do Fabricante
• http://securityfocus.com/bid/48656 · Nota