[email protected]CVE-2012-2753

HistoryJun 19, 2012 - 8:55 p.m.

CVE-2012-2753

2012-06-1920:55:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2012-2753

check point endpoint security

epc gui

privilege escalation

vulnerability

6.7 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.

CPENameOperatorVersion
checkpoint:remote_access_clientscheckpoint remote access clientseqe75
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.10
checkpoint:endpoint_connectcheckpoint endpoint connecteqr73
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80
checkpoint:endpoint_security_vpncheckpoint endpoint security vpneqr75
checkpoint:remote_access_clientscheckpoint remote access clientseqe75.20
checkpoint:remote_access_clientscheckpoint remote access clientseqe75.10
checkpoint:endpoint_securitycheckpoint endpoint securityeqr73
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.20
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.30

CPE	Name	Operator	Version
checkpoint:remote_access_clients	checkpoint remote access clients	eq	e75
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.10
checkpoint:endpoint_connect	checkpoint endpoint connect	eq	r73
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80
checkpoint:endpoint_security_vpn	checkpoint endpoint security vpn	eq	r75
checkpoint:remote_access_clients	checkpoint remote access clients	eq	e75.20
checkpoint:remote_access_clients	checkpoint remote access clients	eq	e75.10
checkpoint:endpoint_security	checkpoint endpoint security	eq	r73
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.20
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.30

References

archives.neohapsis.com/archives/bugtraq/2012-06/0069.html

supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480

6.7 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2012-2753

securityvulns2 nessus1 prion1