Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
BID:14781
Info
Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
| Bugtraq ID: | 14781 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2005 12:00AM |
| Updated: | Sep 08 2005 12:00AM |
| Credit: | fitz <[email protected]> discovered this vulnerability. |
| Vulnerable: |
Check Point Software VPN-1 Next Generation FP2 Check Point Software VPN-1 Next Generation FP1 Check Point Software VPN-1 Next Generation FP0 Check Point Software VPN-1 4.1 SP6 Check Point Software VPN-1 4.1 SP5a Check Point Software VPN-1 4.1 SP5 Check Point Software VPN-1 4.1 SP4 Check Point Software VPN-1 4.1 SP3 Check Point Software VPN-1 4.1 SP2 Check Point Software VPN-1 4.1 SP1 Check Point Software VPN-1 4.1 Check Point Software SecurePlatform NGX R60 Build 244 Check Point Software SecurePlatform NG FP2 Edition 2 Check Point Software SecurePlatform NG FP2 Check Point Software SecurePlatform NG FP1 Check Point Software SecurePlatform NG Check Point Software Provider-1 NG with Application Intelligence R55 Check Point Software Provider-1 NG with Application Intelligence R54 Check Point Software Provider-1 4.1 SP4 Check Point Software Provider-1 4.1 SP3 Check Point Software Provider-1 4.1 SP2 Check Point Software Provider-1 4.1 SP1 Check Point Software Provider-1 4.1 Check Point Software FireWall-1 Next Generation FP3 Check Point Software FireWall-1 Next Generation FP2 Check Point Software FireWall-1 Next Generation FP1 Check Point Software FireWall-1 Next Generation FP0 Check Point Software Firewall-1 [ VPN + DES ] 4.1 Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1 SP2 Build 41716 Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1 Build 41439 Check Point Software Firewall-1 4.1 SP6 Check Point Software Firewall-1 4.1 SP5a Check Point Software Firewall-1 4.1 SP5 Check Point Software Firewall-1 4.1 SP4 Check Point Software Firewall-1 4.1 SP3 Check Point Software Firewall-1 4.1 SP2 Check Point Software Firewall-1 4.1 SP1 Check Point Software Firewall-1 4.1 |
| Not Vulnerable: | |
Discussion
Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
Check Point SecurePlatform NGX is a platform of commercial network security products.
Check Point SecurePlatform NGX is susceptible to a firewall rules bypass vulnerability. This issue is due to a failure of the software to properly implement expected firewall rules.
This vulnerability allows attackers to bypass firewall rules, letting them attack protected services and computers without expected restriction.
This also issue leads to a false sense of security by firewall administrators.
Check Point SecurePlatform NGX is a platform of commercial network security products.
Check Point SecurePlatform NGX is susceptible to a firewall rules bypass vulnerability. This issue is due to a failure of the software to properly implement expected firewall rules.
This vulnerability allows attackers to bypass firewall rules, letting them attack protected services and computers without expected restriction.
This also issue leads to a false sense of security by firewall administrators.
Exploit / POC
Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
Solution:
The vendor has released a Solution Document (#sk31196) to address this issue.
Further information is available from:
http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31196
Solution:
The vendor has released a Solution Document (#sk31196) to address this issue.
Further information is available from:
http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31196
References
Check Point SecurePlatform NGX Firewall Rules Bypass Vulnerability
References:
References:
- Check Point Technical Support (Check Point Software)
- NGX Home Page (Check Point Software)
- Rule bypassing in CheckPoint NGX R60 (fitz