CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

CVE-2007-3906

Mode C: CVE-2007-3906 affects Kaspersky Anti-Virus for Check Point FireWall-1. The vulnerability (unspecified vectors) may cause a denial-of-service kernel hang in all affected installs prior to Critical Fix 1 (version 5.5.161.0). Impact is partial availability; attacker role is not clearly defin...

Integrity Clientless Security (ICS) Update 3.7.166.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Kaspersky Anti-Virus 5.5 for Check Point Firewall-1拒绝服务漏洞

Kaspersky Anti-Virus是一款反防毒解决方案。 Kaspersky Anti-Virus 5.5 for Check Point Firewall-1存在未明安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Kaspersky Anti-Virus for Check Point Firewall-1 5.5 可参考如下安全公告获得补丁信息； http://support.kaspersky.com/checkpoint?qid=208279464...

Kaspersky Anti-Virus for Check Point FireWall-1 Unspecified DoS

The version of Kaspersky Anti-Virus for Check Point FireWall-1 installed on the remote host suffers from an as-yet unspecified issue in which the antivirus kernel may freeze. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25710; scriptversion"1.19"; scriptcvsdate"Dat...

Check Point response to Integer Overflow Vulnerability in GNU C Library (CVE-2007-3508)

...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and...

CVE-2007-3489

Cross-site request forgery CSRF vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and...

CVE-2007-3489

Cross-site request forgery CSRF vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and...

CVE-2007-3489

CVE-2007-3489 affects Check Point VPN-1 Edge X Embedded NGX 7.0.33x with CSRF in the management interface (pop/WizU.html). A remote attacker can perform privileged actions as administrators, demonstrated by a request using swuuser and swupass parameters to add an administrator account. The vulner...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

CVE-2007-3462

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

Default credentials

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...

Cross site request forgery (csrf)

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other...

CVE-2007-3465

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...

CVE-2007-3464

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other...

CVE-2007-3465

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...

CVE-2007-3462

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

CVE-2007-3462

CVE-2007-3462 describes a Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office. The affected component: Safe@Office firmware prior to Embedded NGX 7.0.45 GA. Impact per the descriptions: remote attackers could execute commands as arbitrary users and disable firewall...