CVE-2006-3885

The CVE-2006-3885 vulnerability affects Check Point Firewall-1 R55W prior to HFA03, where an attacker can perform a directory traversal to read arbitrary files by sending an encoded .. in the URL on TCP port 18264. The root cause is improper validation of URL path components leading to file discl...

Check Point R55W Directory Traversal

Overview Check Point Firewall-1 R55W contains a hard coded web server, which runs on TCP port 18264. This server is there to deal with PKI requirements for Check Point's VPN functionality. During a routine penetration test of a client, Sec-Tec discovered a directory traversal vulnerability that...