topic Re: Vulerability#CVE-2007-4752 in General Topics

Vulerability#CVE-2007-4752

Vengatesh_SR — Mon, 15 Oct 2018 10:32:54 GMT

Hi Team,

We are getting the below vulnerability for the checkpoint.

Name : OpenSSH X11 Cookie Local Authentication Bypass Vulnerability (openssh-x11-cookie-auth-bypass)

Description :

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.

OpenBSD OpenSSH < 4.7
Download and apply the upgrade from: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH
While you can always build OpenSSH from source, many platforms and distributions provide pre-built binary packages for OpenSSH.
These pre-built packages are usually customized and optimized for a particular distribution, therefore we recommend that you use the packages if they are available for your operating system.

-----------------------------------------------------------------

We have the take installed is take_286.

From the above description, I can find the CVE associated for the vulnerability is #CVE-2007-4752.

From the #sk65269, I can see the comments given is Not vulnerable. So it means checkpoint devices are not vulnerable for this vulnerbaility ??

Regards,

Vengatesh SR

Re: Vulerability#CVE-2007-4752

Marco_Valenti — Mon, 15 Oct 2018 10:55:32 GMT

Here you can find your reply , have fun

Status of OpenSSH CVEs

Re: Vulerability#CVE-2007-4752

G_W_Albrecht — Mon, 15 Oct 2018 10:55:46 GMT

sk65269 also gives a command to check the vulnerability of the installed openssh binary...

Re: Vulerability#CVE-2007-4752

PhoneBoy — Mon, 15 Oct 2018 11:26:29 GMT

The SK is pretty clear--not vulnerable.

In general, this can be because:

Our configuration does not include the relevant code needed to exploit the vulnerability
We've patched the relevant defect

Re: Vulerability#CVE-2007-4752

Vengatesh_SR — Mon, 15 Oct 2018 11:43:22 GMT

So it means our devices are not vulnerable right ?

Re: Vulerability#CVE-2007-4752

PhoneBoy — Mon, 15 Oct 2018 11:46:42 GMT

Correct, not vulnerable.

Re: Vulerability#CVE-2007-4752

Vengatesh_SR — Mon, 15 Oct 2018 12:27:03 GMT

Wow Great!!! Thanks

Re: Vulerability#CVE-2007-4752

Gaurav_Pandya — Mon, 15 Oct 2018 12:53:05 GMT

Great

Re: Vulerability#CVE-2007-4752

tbindenagel — Wed, 16 Oct 2019 12:58:10 GMT

Do we have a way to prove that we're not vulnerable? We are using a Rapid7 scanner, and it is seeing the vulnerability and we need to show evidence that the vulnerability does not exist rather than just an sk that says "not vulnerable".