hadoop-secondary-namenode-info NSE Script

Retrieves information from an Apache Hadoop secondary NameNode HTTP status page. Information gathered: Date/time the service was started Hadoop version Hadoop compile date Hostname or IP address and port of the master NameNode server Last time a checkpoint was taken How often checkpoints are take...

CheckPoint Security Management products symbolic links vulnerability

Symbolic links vulnerability during installation...

CheckPoint SSL VPN ActiveX code execution

Unsafe methods allow file upload and execute...

Checkpoint VPN - Priviledge Escalation

It appears this bug has gone unoticed to vulnerability databases maintainers, very likely due to the lack of disclosure/publication. This usually means it's also not in compliance/patching systems and exposes customers to unecessary risk. To counteract I'd like to drop this note. Checkpoint SNX...

Checkpoint VPN privilege escalation

It's possible to obtain Local System privileges...

Checkpoint Firewall ESMTP Service Detection

Binary data 5929.prm...

CheckPoint Connectra /Login/Login任意脚本注入漏洞

BUGTRAQ ID: 36466 CheckPoint Connectra是一个SSL-VPN解决方案，允许用户使用普通的web浏览器访问远程系统。 Connectra的/Login/Login目录下的初始登录脚本没有对用户通过HTTP POST请求所提交的输入数据执行正确的验证，远程攻击者可以通过在请求中包含特制vpidprefix参数导致注入并执行任意脚本。 Check Point Software Connectra R62 厂商补丁： Check Point Software --------------------...

Check Point VPN-1 PAT Information Disclosure Vulnerability - Active Check

Check Point VPN-1 PAT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2008 Tim Brown and Portcullis Computer Security Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Checkpoint VPN-1 PAT information disclosure

Checkpoint VPN-1 PAT information disclosure By sending crafted packets to ports on the firewall which are mapped by port address translation PAT to ports on internal devices, information about the internal network may be disclosed in the resulting ICMP error packets. Port 18264/tcp on the firewal...

Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)

Crashing ZoneAlarm 8.0.020.000 by Checkpoint Component : TrueVector ========================================== - Keep ZoneALarm 8 running with vsmon.exe running which runs by default - On System A : Run the rogue proxy attached zacrasherproxy.exe and set a port number eg: zacrasherproxy.exe 5938 ...

checkpoint_080306.txt

Louhi Networks Security Advisory Advisory: Checkpoint VPN-1 UTM Edge cross-site scripting Release Date: 2008/03/06 Last Modified: 2008/03/06 Authors: Henri Lindberg, Associate of ISC² [email protected] Application: Checkpoint VPN-1 Edge W Embedded NGX 7.0.48x patched in version 7.5.48...

Checkpoint VPN-1 Edge crossite scripting

Crossite scriptign with web authorization page...

Henri Lindberg - Smilehouse Oy

Louhi Networks Security Advisory Advisory: Checkpoint VPN-1 UTM Edge cross-site scripting Release Date: 2008/03/06 Last Modified: 2008/03/06 Authors: Henri Lindberg, Associate of ISC [email protected] Application: Checkpoint VPN-1 Edge W Embedded NGX 7.0.48x patched in version 7.5.48 Device...

CheckPoint SecuRemote / Secure Client weak permissions

Cached logon credentials are stored in registry key accessed by everyone group...

Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability

http://www.digihax.com Bulletin Release 02.06.08 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability Or, How to Be Bill Gates, if Bill Gates uses a CheckPoint VPN Client Discovery Date: December 13, 2007 Vendor Release Date: February 6, 2008 Severity: Impersonation of users...

CheckPoint Secure Platform Multiple Buffer Overflows

Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...

Checkpoint VPN-1 / Firewall-1 multiple security vulnerabilities

Multiple buffer overflows / memory corruptions...

[Reversemode Advisory] CheckPoint ZoneLabs Vsdatant.sys multiple local privilege escalation vulnerabilities

CHECK POINT ZONE LABS PRODUCTS MULTIPLE LOCAL PRIVILEGE ESCALATION VULNERABILITIES Ruben Santamarta rubenatreversemodedotcom 08.20.2007 Affected Products: ZoneAlarm 7.0.362 Vsdatant.sys is exposed via “.vsdatant”. The permissive ACL allows everyone to invoke privileged IOCTLs implemented in the...

Checkpoint ZoneAlarm multiple privilege escalations

Vsdatant.sys driver multiple IOCTLs buffer overflows. Weak permissions for executable files...

checkpoint-csrf.txt

Louhi Networks Oy -= Security Advisory =- Advisory: Checkpoint VPN-1 UTM Edge Cross Site Request Forgery Release Date: 2007/06/26 Last Modified: 2007/06/26 Authors: Henri Lindberg, Associate of ISC² [email protected] Jussi Vuokko, CISSP [email protected] Application: Checkpoint VPN-1 Ed...