Check Point FW-1 SecuClient/SecuRemote Client Design Vulnerability

Bugtraq ID:	4253
Class:	Design Error
CVE:	CVE-2002-0428
Remote:	No
Local:	Yes
Published:	Mar 08 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	This issue was reported to BugTraq by Cedric Amand <[email protected]>.
Vulnerable:	Check Point Software VPN-1 4.1 SP4 Check Point Software VPN-1 4.1 SP3 Check Point Software VPN-1 4.1 SP2 Check Point Software VPN-1 4.1 SP1 Check Point Software VPN-1 4.1 Check Point Software Nokia Voyager 4.1 Check Point Software Firewall-1 4.1 SP5 Check Point Software Firewall-1 4.1 SP4 Check Point Software Firewall-1 4.1 SP3 Check Point Software Firewall-1 4.1 SP2 Check Point Software Firewall-1 4.1 SP1 Check Point Software Firewall-1 4.1 Check Point Software Firewall-1 4.0 SP8 Check Point Software Firewall-1 4.0 SP7 Check Point Software Firewall-1 4.0 SP6 Check Point Software Firewall-1 4.0 SP5 Check Point Software Firewall-1 4.0 SP4 Check Point Software Firewall-1 4.0 SP3 Check Point Software Firewall-1 4.0 SP2 Check Point Software Firewall-1 4.0 SP1 Check Point Software Firewall-1 4.0
Not Vulnerable:

Check Point FW-1 SecuClient/SecuRemote Client Design Vulnerability

This issue may be trivially exploited by an attacker who can read from or write to 'users.C'.

Check Point FW-1 SecuClient/SecuRemote Client Design Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.