PT-2008-2284 · Check Point · Check Point Vpn-1 Securemote/Secureclient

Michael Neal Vasquez · Published 2008-02-08 · Updated 2024-01-25 · CVE-2008-0662

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 SecuRemote/SecureClient NGX versions R56 and R60

Description The issue concerns the Auto Local Logon feature, which caches credentials in a registry key with inadequate permissions, allowing local users to read and reuse these credentials to gain privileges.

Recommendations For versions R56 and R60, consider restricting access to the CheckpointSecuRemote registry key to prevent unauthorized users from reading the cached credentials. As a temporary workaround, disabling the Auto Local Logon feature may help minimize the risk of exploitation until a more permanent solution is available.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2008-0662

Affected Products

Check Point Vpn-1 Securemote/Secureclient

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-0662 · Security Note
• http://securityfocus.com/bid/27675 · Note
• http://vupen.com/english/advisories/2008/0475 · Note
• https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml · Note
• http://secunia.com/advisories/28820 · Note
• http://securityfocus.com/archive/1/487735/100/0/threaded · Note
• http://securityreason.com/securityalert/3627 · Note
• http://digihax.com · Note
• http://securitytracker.com/id?1019317 · Note