Checkpoint FireWall-1 Webserver Directory Traversal Vulnerability

Bugtraq ID:	19136
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2006 12:00AM
Updated:	Jul 27 2006 10:57PM
Credit:	Pete Foster is credited with the discovery of this vulnerability.
Vulnerable:	Check Point Software Firewall-1 R55W HFA2 Check Point Software Firewall-1 R55W HFA1 Check Point Software Firewall-1 R55W
Not Vulnerable:	Check Point Software Firewall-1 R55W HFA3

Checkpoint FireWall-1 Webserver Directory Traversal Vulnerability

Checkpoint FireWall-1 is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

R55W HFA2 and prior versions are vulnerable to this issue.

Checkpoint FireWall-1 Webserver Directory Traversal Vulnerability

Attackers can exploit this issue via a web client.

Checkpoint FireWall-1 Webserver Directory Traversal Vulnerability

Solution:
The vendor has released version R55W HFA3 to address this issue. Contact the vendor for more information.

Checkpoint FireWall-1 Webserver Directory Traversal Vulnerability

References:

• Check Point R55W Directory Traversal ([email protected])