VulnerabilityModified
CVE-2005-4093
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
MEDIUM 6.5EPSS 3.15%
Does this matter?
Lower severity and a low EPSS score (3.15%). Track it; it rarely justifies an emergency change on its own.
Description
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 3.15% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- checkpoint/secureclient ng · checkpoint/vpn-1 secureclient
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html
- http://secunia.com/advisories/17837Vendor Advisory
- http://secunia.com/advisories/23395Vendor Advisory
- http://securitytracker.com/id?1015326
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html
- http://www.securityfocus.com/bid/15757
- http://www.us.debian.org/security/2006/dsa-1237
- http://www.vupen.com/english/advisories/2005/2808Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html
- http://secunia.com/advisories/17837Vendor Advisory
- http://secunia.com/advisories/23395Vendor Advisory
- http://securitytracker.com/id?1015326
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html
- http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html
- http://www.securityfocus.com/bid/15757
- http://www.us.debian.org/security/2006/dsa-1237
- http://www.vupen.com/english/advisories/2005/2808Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.