Check Point Security Gateway and Security Management Server Spoofing Vulnerability

Bugtraq ID:	65151
Class:	Input Validation Error
CVE:	CVE-2014-1672
Remote:	Yes
Local:	No
Published:	Jan 14 2014 12:00AM
Updated:	Jan 14 2014 12:00AM
Credit:	Vendor reported this issue.
Vulnerable:	Check Point Software Security Management Server R75.47 Check Point Software Security Gateways R75.47
Not Vulnerable:

Check Point Security Gateway and Security Management Server Spoofing Vulnerability

Check Point Security Gateway and Security Management Server are prone to an unspecified spoofing vulnerability.

Attackers can exploit this issue to conduct spoofing attacks, bypass certain security restrictions, and gain unauthorized access; other attacks are also possible.

The following products are vulnerable:

Check Point Security Gateway version R75.47
Check Point Security Management Server version R75.47

Check Point Security Gateway and Security Management Server Spoofing Vulnerability

An attacker can exploit this issue using readily available tools.

Check Point Security Gateway and Security Management Server Spoofing Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Check Point Security Gateway and Security Management Server Spoofing Vulnerability

References:

• Check Point Home Page (Check Point Software)
  
• Anti-Spoofing might be enforced incorrectly in specific scenarios on R75.47 Secu (Check Point Software)