bugtraq - Checkpoint VPN - Priviledge Escalation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <141142674.20110312123243@Zoller.lu>
Date: Sat, 12 Mar 2011 12:32:43 +0100
From: Thierry Zoller <Thierry@...ler.lu>
To: bugtraq <bugtraq@...urityfocus.com>
Cc: info@...cl.lu
Subject: Checkpoint VPN - Priviledge Escalation

It  appears  this  bug  has  gone  unoticed to vulnerability databases
maintainers, very likely due to the lack  of disclosure/publication.
This usually means it's also not in compliance/patching systems and
exposes  customers  to unecessary risk. To counteract I'd like to drop
this note.

Checkpoint SNX Escalation of Privileges Vulnerability
======================================================
Product:SSL Network Extender, Endpoint Security Client, Endpoint Connect, Endpoint Security VPN
Version:R73
URL : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk60510

The following product versions are not vulnerable:
* EPS R80
* EPS R73 HFA01
* EPC R73 HFA01
* EPS R75 VPN
* SNX R75
* SNX R71.30

All other versions of SNX, EPS and EPC are vulnerable.

Credits
--------
Check Point thanks Thierry Zoller and Nagib Guettiche of Verizon Business (www.verizonbusiness.com) for bringing this issue to our attention in a forthright and professional manner.