CVE-2008-0662: Infoleak

Published Feb 8, 2008

Updated

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.

Affected Software

2 affected components

Checkpoint Vpn-1 Secureclient=ngai_r56

Checkpoint Vpn-1 Secureclient=ngx_r60

Event History

Feb 8, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0662?

CVE-2008-0662 is classified as a medium severity vulnerability due to the potential for local users to access cached credentials.

How do I fix CVE-2008-0662?

To fix CVE-2008-0662, adjust the permissions on the Checkpoint\SecuRemote registry key to restrict access.

What versions are affected by CVE-2008-0662?

CVE-2008-0662 affects Check Point VPN-1 SecuRemote/SecureClient versions NGX R60 and R56 for Windows.

What is the impact of CVE-2008-0662?

The impact of CVE-2008-0662 allows local users to gain unauthorized privileges by accessing stored credentials.

Is there a patch available for CVE-2008-0662?

Yes, Check Point has released updates and patches that address the vulnerability found in CVE-2008-0662.