PT-2013-1318 · Check Point · Check Point Gaia+1

Publicado 2013-02-21 · Atualizado 2014-01-23 · CVE-2013-7311

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Gaia versions R75.X through R76 Check Point IPSO OS versions 6.2 R75.X through R76

Description The issue is related to the implementation of the OSPF protocol in the Check Point Gaia operating system, which does not account for duplicate Link State ID values in LSA packets. This can be exploited by sending specially crafted LSA packets, potentially allowing an attacker to cause a denial of service or obtain sensitive information.

Recommendations For Check Point Gaia versions R75.X through R76, consider disabling the OSPF protocol until a patch is available. For Check Point IPSO OS versions 6.2 R75.X through R76, restrict access to the LSA database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-694

Identificadores relacionados

BDU:2019-03757

CVE-2013-7311

Produtos afetados

Check Point Gaia

Check Point Ipso Os

Referências · 8

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-03757 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7311 · Nota de Segurança
• http://kb.cert.org/vuls/id/BLUU-985QRC · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7311 · Nota de Segurança
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490&src=securityAlerts · Nota
• http://kb.cert.org/vuls/id/229804 · Nota
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 · Nota