Check Point Security Management Post Installation Script Temporary File Creation Vulnerability

Bugtraq ID:	49162
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 16 2011 12:00AM
Updated:	Aug 16 2011 12:00AM
Credit:	Matthew Flanagan
Vulnerable:	Check Point Software Security Management R75.10 Check Point Software Security Management R71.30 Check Point Software Security Management R70.40 Check Point Software Security Management R65.70
Not Vulnerable:	Check Point Software Security Management R75.20 Check Point Software Security Management R71.40

Check Point Security Management Post Installation Script Temporary File Creation Vulnerability

Check Point Security Management is prone to a vulnerability because it creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

Check Point Security Management Post Installation Script Temporary File Creation Vulnerability

An attacker can use readily available commands to exploit this issue.

Check Point Security Management Post Installation Script Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Check Point Security Management Post Installation Script Temporary File Creation Vulnerability

References:

• Vendor Homepage (Checkpoint)
  
• [[email protected]: CVE-2011-2664 Symlink Following and Second-Order Sy ( Matthew Flanagan )