CVE-2006-3885: Medium severity Checkpoint Firewall-1 vulnerability
Published Jul 27, 2006
·Updated
Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264.
Affected Software
3 affected components
Checkpoint Firewall-1=r55w
Checkpoint Firewall-1=r55w-hfa2
Checkpoint Firewall-1=r55w-hfa1
Remediation
Patch Available
Event History
Jul 27, 2006
CVE Published
01:04 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3885?
CVE-2006-3885 has been classified as a medium-severity vulnerability.
2
How do I fix CVE-2006-3885?
To mitigate CVE-2006-3885, it is recommended to upgrade Check Point Firewall-1 R55W to HFA03 or later.
3
What software versions are affected by CVE-2006-3885?
CVE-2006-3885 affects Check Point Firewall-1 R55W and its HFA1 and HFA2 updates.
4
What type of attack does CVE-2006-3885 facilitate?
CVE-2006-3885 allows remote attackers to exploit directory traversal to read arbitrary files.
5
On which port does CVE-2006-3885 vulnerability expose the risk?
CVE-2006-3885 is exploitable on TCP port 18264.