Secunia

fitz has reported a security issue in Check Point Firewall, which potentially can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to an error in the CIFS service group implementation. This may cause all traffic from a network in the CIFS service group to either pass through the firewall or be dropped at the firewall, depending on the configured rule.

The security issue has been reported in the following products:
* VPN-1/FireWall-1
* VPN-1 VSX
* Provider-1

Solution
The vendor suggests renaming the CIFS service group.
Further details available in Customer Area

Provided and/or discovered by
fitz

Changelog
Further details available in Customer Area

Original Advisory
Check Point:
http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31196

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area