|
|
Family: Firewalls --> Category: infos
Checkpoint SecuRemote information leakage Vulnerability Scan
Vulnerability Scan Summary
Checkpoint SecuRemote information leakage
Detailed Explanation for this Vulnerability Test
The remote host seems to be a Checkpoint FireWall-1 running SecuRemote.
The SecuRemote service contains a vulnerability that allows attackers
to gain information about the hosts, networks, and users configured on
the Firewall.
This will enable attackers to focus their attack strategy.
You should not let this information leak out.
Solution:
Either block the SecuRemote's ports (TCP 256 and 264) to untrusted networks,
or upgrade to the latest version of Checkpoint's Firewall-1.
Workaround:
You could restrict the topology download, so that only authenticated
users can download it.
Go to Policy Properties Desktop Security of your Policy Editor and
uncheck 'respond to unauthenticated topology requests'.
After installing the Policy only authenticated Users can download
the Topology.
Threat Level: Medium
Reference : http://online.securityfocus.com/archive/1/197566
http://online.securityfocus.com/bid/3058
For More Information:
http://www.securiteam.com/securitynews/5HP0D2A4UC.html
Click HERE for more information and discussions on this network vulnerability scan.
|
