Check Point VPN SecureClient/SecuRemote Local Login Credentials Information Disclosure Vulnerability

Bugtraq ID:	27675
Class:	Design Error
CVE:	CVE-2008-0662
Remote:	No
Local:	Yes
Published:	Feb 07 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	MN Vasquez discovered this issue.
Vulnerable:	Check Point Software VPN-1SecuRemote/SecureClient NGX R60 Check Point Software VPN-1SecuRemote/SecureClient NGAI R56
Not Vulnerable:

Check Point VPN SecureClient/SecuRemote Local Login Credentials Information Disclosure Vulnerability

Check Point VPN-1 SecureClient/SecuRemote client for Microsoft Windows is prone to an information-disclosure vulnerability because it fails to protect users' login credentials.

Attackers can exploit this issue to harvest VPN login credentials and gain unauthorized access to networks and resources protected by the VPN. This may lead to further attacks.

Check Point VPN SecureClient/SecuRemote Local Login Credentials Information Disclosure Vulnerability

Attackers can exploit this issue with readily available commands.

Check Point VPN SecureClient/SecuRemote Local Login Credentials Information Disclosure Vulnerability

Solution:
The vendor released a security bulletin and fixes to address this issue. Please contact the vendor for information on obtaining and applying the fixes.

Check Point VPN SecureClient/SecuRemote Local Login Credentials Information Disclosure Vulnerability

References:

• Solution ID: sk34315 SecuRemote/SecureClient NGX R60 HFA_02 Supplement 2 protect (Check Point Software)
  
• VPN-1 Clients (Check Point Software)
  
• Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability ("Michael Neal Vasquez" )