Unscored CVE-2002-0428 EUVD-2002-0425GHSA-jqf7-2vx9-v35c

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire o…

Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.

References

fw1-authentication-bypass-timeouts(8423) vdb-entry
20020308 Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C) mailing-list
4253 vdb-entry