• info
• discussion
• exploit
• solution
• references

Check Point Firewall-1 Session Agent Impersonation Vulnerability

Solution:
Firewall-1 4.1 will, by default, use encryption for the session agent. This eliminates this vulnerability. If the choice was made to use cleartext passwords, 4.1 should still be considered vulnerable.