PT-2011-4011 · Check Point · Check Point Multi-Domain Management / Provider-1+1

Published 2011-07-08 · Updated 2017-08-29 · CVE-2011-2664

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Multi-Domain Management / Provider-1 versions R65 through R75 Check Point SmartCenter (affected versions not specified)

Description The issue allows local users on the MDS system to overwrite arbitrary files via unknown vectors during installation on non-Windows machines.

Recommendations For Check Point Multi-Domain Management / Provider-1 versions R65 through R75, consider restricting access to the installation process on non-Windows machines until a fix is available. For Check Point SmartCenter, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2011-2664

Affected Products

Check Point Multi-Domain Management / Provider-1

Check Point Smartcenter

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2664 · Security Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk63565 · Vendor Advisory
• http://secunia.com/advisories/45231 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68502 · Note
• http://securityfocus.com/bid/48656 · Note