CVE-2008-0662

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

PT-2008-2284 · Check Point · Check Point Vpn-1 Securemote/Secureclient

Name of the Vulnerable Software and Affected Versions: Check Point VPN-1 SecuRemote/SecureClient NGX versions R56 and R60 Description: The issue concerns the Auto Local Logon feature, which caches credentials in a registry key with inadequate permissions, allowing local users to read and reuse...

Check Point response to NET-SNMP vulnerability CVE-2007-5846

...

CVE-2002-2405

Check Point FireWall-1 4.1 and Next Generation NG, with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall...

CVE-2002-2405

CVE-2002-2405 affects Check Point FireWall-1 4.1 and NG when UserAuth is configured to proxy HTTP traffic only, permitting remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall. The root cause and actionable remediation details are not provided in the co...

Check Point response to OpenSSL vulnerability CVE-2006-3738

...

Check Point response to OpenSSL vulnerability CVE-2007-3108

...

Check Point response to OpenSSL vulnerability CVE-2007-5135

...

Check Point SecurePlatform多个缓冲区溢出漏洞

Check Point SecurePlatform是一款专业的防火墙解决方案。 Check Point SecurePlatform没有对用户提交的数据进行边界检查，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 攻击者可以利用漏洞以应用程序上下文执行任何代码。失败的尝试可能导致应用程序崩溃或对应用程序进行拒绝服务攻击。 多个问题于本地利用相关，也包含远程可利用。 Check Point VPN-1 Power/UTM NGX R60 Check Point SecurePlatform R60HFA05 目前没有解决方案提供： http://www.checkpoint.com/...

Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit

No description provided by source. / Summary A vulnerability exists in Check Point VPN-1/FireWall-1 4.1 SP2 that enables an attacker to establish connections to blocked TCP services through the firewall in certain configurations. We expect many deployed FireWall-1 installations to be immune to th...

Integrity Clientless Security (ICS) Update 3.7.172.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Memory corruption

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet Irp in a METHODNEITHER 1 IOCTL 0x8400000F or 2 IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations...

CVE-2007-4216

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet Irp in a METHODNEITHER 1 IOCTL 0x8400000F or 2 IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations...

CVE-2007-4216

The CVE-2007-4216 issue affects ZoneAlarm’s vsdatant.sys (Zone Labs Zone Alarm)

CVE-2007-4216

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet Irp in a METHODNEITHER 1 IOCTL 0x8400000F or 2 IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations...

CVE-2005-2932

Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls...

CVE-2005-2932

CVE-2005-2932 affects Check Point Zone Labs ZoneAlarm products prior to 7.0.362 (e.g., ZoneAlarm Security Suite 5.5.062.004 and 6.5.737). The root cause is insecure default ACLs on critical files installed by ZoneAlarm, enabling local users to escalate privileges or bypass protections by replacin...

iDefense Security Advisory 08.20.07: Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities

Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-wa...

iDefense Security Advisory 08.20.07: Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability

Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-ware...

CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...