正文

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

admin
admin V管理员 /0 评论 /13 阅读
0415
此篇文章发布距今已超过1182天，您需要注意文章的内容或图片是否可用！

CVE编号

CVE-2009-1227

利用情况

暂无

补丁情况

N/A

披露时间

2009-04-03
漏洞描述
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis."
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html
http://www.securityfocus.com/archive/1/502256/100/0/threaded
http://www.securityfocus.com/bid/34286
http://www.securitytracker.com/id?1021948
https://www.exploit-db.com/exploits/8313
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 checkpoint firewall-1_pki_web_service - -
CVSS3评分 10.0
  • 攻击路径 网络
  • 攻击复杂度 低
  • 权限要求 无
  • 影响范围 N/A
  • 用户交互 无
  • 可用性 完全地
  • 保密性 完全地
  • 完整性 完全地
AV:N/AC:L/Au:N/C:C/I:C/A:C CWE-ID 漏洞类型 CWE-119 内存缓冲区边界内操作的限制不恰当