CVE-2005-4093
First published: Thu Dec 08 2005(Updated: )
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Checkpoint Secureclient Ng | =r56 | |
| Checkpoint Vpn-1 Secureclient | =4.1 | |
| Checkpoint Secureclient Ng | ||
| Checkpoint Vpn-1 Secureclient | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.mail-archive.com/swinog@lists.swinog.ch/msg00798.html
- http://www.mail-archive.com/swinog@lists.swinog.ch/msg00799.html
- http://www.securityfocus.com/bid/15757
- http://securitytracker.com/id?1015326
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html
- http://secunia.com/advisories/17837
- http://www.us.debian.org/security/2006/dsa-1237
- http://secunia.com/advisories/23395
- http://www.vupen.com/english/advisories/2005/2808
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/checkpoint
- canonical/checkpoint secureclient ng
- version/checkpoint secureclient ng/r56
- canonical/checkpoint vpn-1 secureclient
- version/checkpoint vpn-1 secureclient/4.1
- version/checkpoint vpn-1 secureclient/4.0