CENTER.HU groups
CENTER.HU address

User:

Guest

www.center.hu / Archive / Security news / december, 2005 / CheckPoint VPN-1 SecureClient allows security policy to be b 

CheckPoint VPN-1 SecureClient allows security policy to be b

CheckPoint VPN-1 SecureClient allows security policy to be b

Madrid, December 12, 2005 - A vulnerability has been detected in CheckPoint VPN-1 SecureClient that could allow the security policy to be disabled, according to a bulletin released by SecurityTracker.

The security problem lies in SecureClient trusting in the local copy of the policy file (lcal.scv) to check client integrity before allowing it to connect to internal networks via VPN. Users with write access to the file can bypass this check and continuously replace the file with a modified file.

If this vulnerability is successfully exploited, when the SecureClient is started, the original security policy will not be enforced.

Oxygen3 24h-365d
by Panda Software

Back




Copyright © CENTER.HU Ltd, 2000-2010. All rights reserved

sitemap | privacy policy |

copyrights | new pages |

terms of purchase | contact us


PARTNERS: Computerworld.hu | GameStar.hu | PCWorld.hu | SG.hu | PC Guru | Hitel