CVE-2011-2664 Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products

======================================================================= title: Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products product: Check Point Security Management Multi-Domain Security Management / Provider-1 SmartCenter...

Check Point SSL VPN On-Demand应用程序远程代码执行漏洞

Bugtraq ID: 47695 CVE ID：CVE-2011-1827 SNX SecureWorkSpace和Endpoint Security On-Demand可从Connectra或security gateways下载的客户端，可实现按需远程连接。它们可使用Check Point Deployment Agent Java applet或ActiveX控件配置在浏览中。 应用程序SSL网络扩展器SNX, SecureWorkSpace和Endpoint Security On-Demand通过浏览器配置时，容易受到恶意网站的攻击，导致在末端用户机器上执行任意恶意代码。...

Check Point SecurePlatform多个缓冲区溢出漏洞

Check Point SecurePlatform是一款专业的防火墙解决方案。 Check Point SecurePlatform没有对用户提交的数据进行边界检查，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 攻击者可以利用漏洞以应用程序上下文执行任何代码。失败的尝试可能导致应用程序崩溃或对应用程序进行拒绝服务攻击。 多个问题于本地利用相关，也包含远程可利用。 Check Point VPN-1 Power/UTM NGX R60 Check Point SecurePlatform R60HFA05 目前没有解决方案提供： http://www.checkpoint.com/...

SecurePlatform Local Privilege Escalation Report

...

Rule bypassing in CheckPoint NGX R60

Hi folks, as playing a little bit with CheckPoint NGX new release R60, I noticed a serious problem with the predefined service group "CIFS". This group includes the services called "microsoft-ds" TCP Port 445 and the predefined service group "NBT", which includes some old smb-stuff. If I use this...