NVD

Id
635  
Name
CVE-2008-0662  
Description
The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the CheckpointSecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-02-07  
Modified Date
2011-03-07  
Seq
2008-0662  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
4202 635 CVE-2008-0662 http://digihax.com/  View
4203 635 CVE-2008-0662 3627  View
4204 635 CVE-2008-0662 20080207 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability  View
4205 635 CVE-2008-0662 27675  View
4206 635 CVE-2008-0662 1019317  View
4207 635 CVE-2008-0662 ADV-2008-0475  View
4208 635 CVE-2008-0662 https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47393 JVNDB-2008-002703 Check Point VPN-1 SecuRemote/SecureClient NGX における権限を取得される脆弱性 Windows の Check Point VPN-1 SecuRemote/SecureClient NGX の Auto Local Logon 機能は、Everyone/ フルコントロールパーミッションを持つ CheckpointSecuRemote レジストリキーの配下に資格情報をキャッシュするため、権限を取得される脆弱性が存在します。 CVE-2008-0662 30775 CVE-2008-0662 635 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002703.html 2008-02-07 2012-06-26 View