----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
VPN-1 SecuRemote/SecureClient NGX R60 and NGAI R56 Information
Disclosure

SECUNIA ADVISORY ID:
SA28820

VERIFY ADVISORY:
http://secunia.com/advisories/28820/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
Local system

SOFTWARE:
Check Point VPN-1 SecureClient
http://secunia.com/product/2966/
Check Point VPN-1 SecuRemote
http://secunia.com/product/2180/

DESCRIPTION:
A vulnerability has been reported in VPN-1 SecuRemote/SecureClient
NGX R60 and NGAI R56, which can be exploited by malicious, local
users to disclose sensitive information.

The vulnerability is caused due to the application storing user
credentials within the Windows registry
(HKLM\Software\Checkpoint\SecuRemote, subkey "Credentials") without
proper permission settings. This can be exploited to disclose and use
the credentials of other users.

Successful exploitation reportedly requires that caching of
credentials is enabled.

The vulnerability is reported in VPN-1 SecuRemote/SecureClient NGX
R60 and NGAI R56 for Windows.

SOLUTION:
Apply "VPN-1 SecuRemote/SecureClient NGX R60 HFA_02 Supplement 2".
http://checkpoint.com/downloads/quicklinks/downloads_sr.html

PROVIDED AND/OR DISCOVERED BY:
Mike Vasquez, digihax

ORIGINAL ADVISORY:
https://supportcenter.checkpoint.com/supportcenter/PublicLoginRedirect.jsp?toURL=eventSubmit_doGoviewsolutiondetails=%26solutionid=sk34315

digihax:
http://digihax.com/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------