Check Point Firewall-1 SecureRemote Network Information Leak Vulnerability
BID:3058
Info
Check Point Firewall-1 SecureRemote Network Information Leak Vulnerability
| Bugtraq ID: | 3058 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 18 2001 12:00AM |
| Updated: | Jul 18 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by Haroon Meer <[email protected]> on July 18, 2001. |
| Vulnerable: |
Check Point Software Firewall-1 4.1 SP4 Check Point Software Firewall-1 4.1 SP3 Check Point Software Firewall-1 4.1 SP2 Check Point Software Firewall-1 4.1 SP1 Check Point Software Firewall-1 4.1 Check Point Software Firewall-1 4.0 |
| Not Vulnerable: | |
Discussion
Check Point Firewall-1 SecureRemote Network Information Leak Vulnerability
SecureRemote is the proprietary VPN infrastructure designed by Check Point Software, and included with some versions of Firewall-1.
A problem with the package allows remote users to gain information about internal networks. Older versions of the package send network topology information to SecureRemote connections prior to authentication, allowing an information gathering attack.
SecureRemote is the proprietary VPN infrastructure designed by Check Point Software, and included with some versions of Firewall-1.
A problem with the package allows remote users to gain information about internal networks. Older versions of the package send network topology information to SecureRemote connections prior to authentication, allowing an information gathering attack.
Exploit / POC
Check Point Firewall-1 SecureRemote Network Information Leak Vulnerability
x
x
Solution / Fix
Check Point Firewall-1 SecureRemote Network Information Leak Vulnerability
Solution:
This problem has been fixed in recent releases of the software.
Solution:
This problem has been fixed in recent releases of the software.