CVE-2008-0662 - Vulnerability Details - OpenCVE

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Checkpoint	Vpn-1 Secureclient

Configuration 1 [-]

OR	cpe:2.3:a:checkpoint:vpn-1_secureclient:ngai_r56:::::::*
	cpe:2.3:a:checkpoint:vpn-1_secureclient:ngx_r60:::::::*

No data.

References

Link	Providers
http://digihax.com/
http://secunia.com/advisories/28820
http://securityreason.com/securityalert/3627
http://www.securityfocus.com/archive/1/487735/100/0/threaded
http://www.securityfocus.com/bid/27675
http://www.securitytracker.com/id?1019317
http://www.vupen.com/english/advisories/2008/0475
https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-02-08T01:00:00

Updated: 2024-08-07T07:54:22.690Z

Reserved: 2008-02-07T00:00:00

Link: CVE-2008-0662

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2008-02-08T02:00:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-0662

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-02-07T00:00:00", "descriptions": [{"lang": "en", "value": "The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "3627", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3627"}, {"name": "27675", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27675"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml"}, {"name": "28820", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28820"}, {"name": "20080207 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/487735/100/0/threaded"}, {"name": "ADV-2008-0475", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0475"}, {"name": "1019317", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1019317"}, {"tags": ["x_refsource_MISC"], "url": "http://digihax.com/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-0662", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "3627", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3627"}, {"name": "27675", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27675"}, {"name": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml", "refsource": "CONFIRM", "url": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml"}, {"name": "28820", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28820"}, {"name": "20080207 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/487735/100/0/threaded"}, {"name": "ADV-2008-0475", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0475"}, {"name": "1019317", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1019317"}, {"name": "http://digihax.com/", "refsource": "MISC", "url": "http://digihax.com/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:54:22.690Z"}, "title": "CVE Program Container", "references": [{"name": "3627", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3627"}, {"name": "27675", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27675"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml"}, {"name": "28820", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28820"}, {"name": "20080207 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/487735/100/0/threaded"}, {"name": "ADV-2008-0475", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0475"}, {"name": "1019317", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1019317"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://digihax.com/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-0662", "datePublished": "2008-02-08T01:00:00", "dateReserved": "2008-02-07T00:00:00", "dateUpdated": "2024-08-07T07:54:22.690Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:checkpoint:vpn-1_secureclient:ngai_r56:*:*:*:*:*:*:*", "matchCriteriaId": "3ED03425-BC02-49CA-A5A8-1C53CAE9BE89", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkpoint:vpn-1_secureclient:ngx_r60:*:*:*:*:*:*:*", "matchCriteriaId": "7BA98C3D-2AC0-41A7-BE14-F0C654D06CA2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials."}, {"lang": "es", "value": "La caracter\u00edstica Auto Local Logon en Check Point VPN-1 SecuRemote/SecureClient NGX R60 y R56 para las credenciales de cach\u00e9 de Windows bajo la clave de registro Checkpoint\\SecuRemote, que tiene permisos Everyone/Full Control, lo que permite a usuarios locales conseguir privilegios leyendo y reutilizando credenciales."}], "id": "CVE-2008-0662", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2008-02-08T02:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "http://digihax.com/"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/28820"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://securityreason.com/securityalert/3627"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/487735/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/27675"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1019317"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/0475"}, {"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://digihax.com/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/28820"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://securityreason.com/securityalert/3627"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/487735/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/27675"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1019317"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2008/0475"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-732"}], "source": "nvd@nist.gov", "type": "Primary"}]}