CVE-2014-8951

Technical details (affected product, component, root cause, versions, or remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2014-8952

CVE-2014-8952 affects Check Point Security Gateway versions R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10. Connected documents identify a root cause described as a race condition in the modules (IPS blade, IPsec Remote Access, Mobile Access/SSL VPN blade, SSL Network Extender, Identify A...

Check Point response to the POODLE Bites vulnerability (CVE-2014-3566)

...

Zero-Day in Bugzilla Exposes Zero-Day Vulnerabilities to Hackers

A critical zero-day vulnerability discovered in Mozilla’s popular Bugzilla bug-tracking software used by hundreds of prominent software organizations, both private and open-source, could expose sensitive information and vulnerabilities of the software projects to the hackers. The critical flaw...

Bugzilla Vulnerability Exposes Bug Collections

Hundreds of open source software projects that make use of Bugzilla, Mozilla’s bug-tracking software, anxiously await a patch for a vulnerability that exposes private bugs collected by the system. Mozilla is today expected to make available a patch for the vulnerability in its account creation...

Check Point Response to CVE-2014-6271 and CVE-2014-7169 Bash Code Injection vulnerability

...

FreeBSD Patches TCP Processing DoS Vulnerability

FreeBSD has patched a denial-of-service vulnerability that could affect a host of third-party packages built atop the UNIX-like operating system. The vulnerability—found in the way FreeBSD processes TCP packets—was discovered by a member of Juniper Networks’ incident response team. FreeBSD’s...

Check Point Software Firewall-1 4.0/1.4.1 Resource Exhaustion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the firewall's CPU utilization to 100%. Sending a stream ...

Check Point VPN-1 SecureClient 4.0/4.1 Policy Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on affected computers. This...

Check Point Connectra R62 '/Login/Login' Arbitrary Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36466/info Check Point Connectra is prone to an arbitrary-script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in th...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 Spoofed Source Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq i...

Check Point Software Firewall-1 4.1 SP2 Fast Mode TCP Fragment Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2143/info Check Point Software's VPN-1 and Firewall-1 products contain a vulnerability in their Fast Mode option that may allow an attacker to bypass access control restrictions and access certain blocked services. Fast...

Check Point FW-1 Syslog Daemon Unfiltered Escape Sequence Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7161/info An issue has been discovered in Check Point FW-1 syslog daemon when attempting to process a malicious, remotely supplied, syslog message. Specifically, some messages containing escape sequences are not properly...

Check Point Software Firewall-1 3.0/1 4.0/1 4.1 Session Agent Dictionary Attack (1)

No description provided by source. source: http://www.securityfocus.com/bid/1662/info A vulnerability exists in all versions of the Check Point Session Agent, part of Firewall-1. Session Agent works in such a way that the firewall will establish a connection back to the client machine. Upon doing...

GhostScript PostScript File Stack Overflow Exploit

No description provided by source. Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rbranco noSPAM checkpoint.com GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false,...

Check Point Software Firewall-1 3.0/1 4.0,Cisco PIX Firewall 4.x/5.x "ALG" Client Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind firewalls. Whereas previous descriptions of attacks ...

Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28116/info Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

Check Point Firewall-1 4.x SecuRemote Internal Interface Address Information Leakage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8524/info An information leakage issue has been discovered in Check Point Firewall-1. Because of this, an attacker may gain sensitive information about network resources. // / The syntax is: / / fw1getints start IP addres...

Check Point Software Firewall-1 4.0/1 4.1 Fragmented Packets DoS

No description provided by source. source: http://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1...

Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36315/info Check Point Software Endpoint Security Full Disk Encryption for Microsoft Windows is prone to a remote denial-of-service vulnerability. Exploiting this issue will allow attackers to crash the affected computer,...