PT-2007-4733 · Check Point · Check Point Sofaware Safe@Office

Published 2007-06-27 · Updated 2018-10-16 · CVE-2007-3462

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point SofaWare Safe@Office versions prior to Embedded NGX 7.0.45 GA

Description A cross-site request forgery issue allows remote attackers to execute commands as arbitrary users and disable firewalling of the protected network.

Recommendations For versions prior to Embedded NGX 7.0.45 GA, update to Embedded NGX 7.0.45 GA or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3462

Affected Products

Check Point Sofaware Safe@Office

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-3462 · Security Note
• http://labs.calyptix.com/CX-2007-04.php · Patch
• http://osvdb.org/37644 · Note
• http://vupen.com/english/advisories/2007/2364 · Note
• http://secunia.com/advisories/25822 · Note
• http://securityfocus.com/archive/1/472290/100/0/threaded · Note
• http://securitytracker.com/id?1018317 · Note
• http://labs.calyptix.com/CX-2007-04.txt · Note
• http://sofaware.com/supportDownloads.aspx?boneId=182 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35094 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35093 · Note