Multiple Check Point Endpoint Security Products - Information Disclosure

source: https://www.securityfocus.com/bid/46224/info Multiple Check Point endpoint security products are prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to harvest sensitive information that may lead to further attacks...

Multiple Check Point Endpoint Security Products - Information Disclosure

Multiple Check Point Endpoint Security Products - Information Disclosure source: https://www.securityfocus.com/bid/46224/info Multiple Check Point endpoint security products are prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to harvest sensitive...

CVE-2009-2406

CVE-2009-2406 refers to a stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c of the Linux kernel before 2.6.30.4. The issue arises from not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size, enabling l...

CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access...

CVE-2006-5842

The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information...

CVE-2006-5842

The CVE-2006-5842 entry concerns the Unicore Client (pre-5.6 build 5) on Unix systems where the keystore file uses insecure default permissions. This local-access flaw can let non-privileged users obtain sensitive information. The available documents do not specify the exact affected product vers...

CVE-2006-5842

The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information...