RE: [FW1] New Checkpoint vulnerability - Important!!!

["METE EMINAGAOGLU (IT)" <mete.e@FW1-NOSPAMdigiturk.net>]

Title: RE: [FW1] New Checkpoint vulnerability - Important!!!

No Yim, you don't have to...

Even if you have FW 4.1 SP 3 and IPSO 3.3 or IPSO 3.2, you can install this patch. (No need to upgrade, if, only this patch is involved...) And just patching the management station would be fine. No other extra patching, etc. needed... (Only in some special circumstances, an extra rule install is required...)

You' d better download and read the fw1_41_sp3_sp4_rdp_hf_rn.pdf document on Checkpoint' s site about this vulnerability. The recommendation note given on the site is not clear enough.

-----Original Message-----
From: Yim Lee [mailto:yimwlee@yahoo.com]
Sent: 11 Temmuz 2001 Çar?amba 19:01
To: METE EMINAGAOGLU (IT); fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] New Checkpoint vulnerability - Important!!!

This is the recommendation

Solution:

For all users, upgrade to VPN-1/FireWall-1 4.1 Service
Pack 4 and install the SP4 hotfix, then install a
policy. This hotfix only needs to be applied to
management stations, not firewall modules.

My question:

Do I have to upgrade all my firewall modules to 4.1
SP4 or just simply the management station?

Any help on this is appreciated.

Yim
--- "METE EMINAGAOGLU (IT)" <mete.e@digiturk.net>
wrote:
> Hi to all
> Everyone involved with Checkpoint must read these
> links below!
>
>
<http://www.checkpoint.com/techsupport/alerts/rdp.html>
>
<http://www.inside-security.de/advisories/fw1_rdp.html>
>
>

__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/