多个Check Point防火墙产品信息泄露漏洞(2)

# Only trust that it's real if we have a hostname. If you get a funny
    # response, it might not be what we think it is.
    def report_info(fw_hostname,sc_hostname)
        return unless fw_hostname
        host_info = {
            :host => datastore['RHOST'],
            :os_name => "Checkpoint Firewall-1",
            :purpose => "firewall"
        }
        host_info[:name] = fw_hostname
        host_info[:info] = "SmartCenter Host: #{sc_hostname}" if sc_hostname
        report_host(host_info)
        svc_info = {
            :host => datastore['RHOST'],
            :port => datastore['RPORT'],
            :proto => "tcp",
            :name => "securemote"
        }
        report_service(svc_info)
    end

end

建议:
--------------------------------------------------------------------------------
厂商补丁:

Check Point Software
--------------------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:

内容版权声明:除非注明,否则皆为本站原创文章。

转载注明出处:https://www.heiqu.com/wwgsyx.html