CVEvulnerability
CVE-2005-4093
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
Affected configurations
• checkpoint secureclient ng
• checkpoint secureclient ng r56
• checkpoint vpn-1 secureclient 4.0
• checkpoint vpn-1 secureclient 4.1
Related
Weakness · not in database (1)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html lists.grok.org.uk
- http://secunia.com/advisories/17837 Vendor Advisory
- http://secunia.com/advisories/23395 Vendor Advisory
- http://securitytracker.com/id?1015326 securitytracker.com
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html www.mail-archive.com
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html www.mail-archive.com
- http://www.securityfocus.com/bid/15757 www.securityfocus.com
- http://www.us.debian.org/security/2006/dsa-1237 www.us.debian.org
- http://www.vupen.com/english/advisories/2005/2808 Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html lists.grok.org.uk
- http://secunia.com/advisories/17837 Vendor Advisory
- http://secunia.com/advisories/23395 Vendor Advisory
- http://securitytracker.com/id?1015326 securitytracker.com
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html www.mail-archive.com
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html www.mail-archive.com
- http://www.securityfocus.com/bid/15757 www.securityfocus.com
- http://www.us.debian.org/security/2006/dsa-1237 www.us.debian.org
- http://www.vupen.com/english/advisories/2005/2808 Vendor Advisory