CVE-2005-4093 Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file a...
MediumCVSS 6.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint secureclient ng | All versions | No fix listed |
| checkpoint secureclient ng | = r56 | No fix listed |
| checkpoint vpn-1 secureclient | = 4.0 | No fix listed |
| checkpoint vpn-1 secureclient | = 4.1 | No fix listed |
References
- 20051207 Checkpoint SecureClient NGX Security Policy can easily be disabled mailing-list
- 17837 third-party-advisory vendor-advisory
- 23395 third-party-advisory vendor-advisory
- 1015326 vdb-entry
- www.mail-archive.com
- www.mail-archive.com
- 15757 vdb-entry
- DSA-1237 vendor-advisory
- ADV-2005-2808 vdb-entry vendor-advisory