[22594] in bugtraq
RE: Bug in remote GUI access in CheckPoint Firewall
daemon@ATHENA.MIT.EDU (pesto@diet.drpepper.org)
Mon Sep 10 16:53:35 2001
From: pesto@diet.drpepper.org
Message-Id: <200109101906.f8AJ6fv04973@diet.drpepper.org>
To: bugtraq@securityfocus.com
Date: Mon, 10 Sep 2001 14:06:41 -0500 (CDT)
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
In response to Alan Darien's Checkpoint Discovery...
It appears that 4.1SP4 is not vulnerable to this problem. Both the log viewer and the Security Policy applications prevent you from including a "/" in the filename.
Pesto