Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

Bugtraq ID:	36315
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 09 2009 12:00AM
Updated:	Sep 10 2009 10:31PM
Credit:	Tim Medin
Vulnerable:	Check Point Software Endpoint Security Full Disk Encryption 0
Not Vulnerable:

Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

Check Point Software Endpoint Security Full Disk Encryption for Microsoft Windows is prone to a remote denial-of-service vulnerability.

Exploiting this issue will allow attackers to crash the affected computer, denying service to legitimate users.

NOTE: This BID was originally titled 'Microsoft Windows RDP Connection Denial of Service Vulnerability' based on preliminary reports. It has been updated to properly reflect the underlying issue.

Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

The following example is available:

for /L %i in (1,1,20) do mstsc /v:127.0.0.%i

Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Check Point Endpoint Security Full Disk Encryption RDP Connection Denial of Service Vulnerability

References:

• Endpoint Security Full Disk Encryption Homepage (Check Point Software)
  
• Multiple RDP Connections BSOD DOS (Tim Medin )
  
• Re: Multiple RDP Connections BSOD DOS (Tim Medin )