CVE-2011-2664: Low severity checkpoint multi-domain management / provider-1 vulnerability

Published Jul 8, 2011

Updated

Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors.

Affected Software

5 affected components

Checkpoint Multi-domain Management\/provider-1=ngx_r75

Checkpoint Multi-domain Management\/provider-1=ngx_smartcenter

Checkpoint Multi-domain Management\/provider-1=ngx_r65

Checkpoint Multi-domain Management\/provider-1=ngx_r71

Checkpoint Multi-domain Management\/provider-1=ngx_r70

Remediation

Patch Available

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk63565

Event History

Jul 8, 2011

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2664?

CVE-2011-2664 is classified as a high severity vulnerability due to its potential to allow local users to overwrite arbitrary files.

How do I fix CVE-2011-2664?

To mitigate CVE-2011-2664, it is recommended to apply the latest security patches provided by Check Point for the affected versions.

Which versions of Check Point Multi-Domain Management are affected by CVE-2011-2664?

CVE-2011-2664 affects Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, R75, and SmartCenter.

What are the potential impacts of CVE-2011-2664?

Exploitation of CVE-2011-2664 could lead to unauthorized modification of files by local users on the MDS system.

Is CVE-2011-2664 easy to exploit?

The exact vectors for exploitation of CVE-2011-2664 are unspecified, which may indicate varying complexity based on system configurations.