Check Point SecuRemote NG Local Information Disclosure Vulnerability

Bugtraq ID:	14221
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 12 2005 12:00AM
Updated:	Jul 12 2005 12:00AM
Credit:	Discovery is credited to Sylvain ROGER <[email protected]>.
Vulnerable:	Check Point Software SecuRemote NG with Application Intelligence R54
Not Vulnerable:

Check Point SecuRemote NG Local Information Disclosure Vulnerability

Check Point SecuRemote NG is affected by a local information disclosure vulnerability. This issue may allow an attacker to disclose authentication credentials used to access the VPN application.

An attacker could use the information gathered through the exploitation of this vulnerability to gain access to or carry out other attacks against an affected computer or the network protected by the VPN.

Check Point SecuRemote NG Local Information Disclosure Vulnerability

An exploit is not required.

Check Point SecuRemote NG Local Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Check Point SecuRemote NG Local Information Disclosure Vulnerability

References:

• Check Point Technical Support (Check Point Software)