Simple Bugs Revisited: Root Via Insecure File Permissions

The Target:

Checkpoint SecureClient For OSX

Back in 2006 I reported a privilege escalation bug in Checkpoint’s OSX VPN client. Given the fact that Checkpoint are a security firm and the bug was pretty self explanatory, I figured it would be long time fixed.

As it turns out, they did fix the bug, for the single example file I told them about. Now it is 2008 and what do you know, the 80’s called Checkpoint.