CVE:CVE-2006-0255
CNNVD:CNNVD-200601-167
Check Point VPN-1 SecureClient中未加引号的Windows搜索路径漏洞，可能让本地用户通过C:文件夹中的恶意"program.exe"文件(在SecureClient尝试启动Sr_GUI.exe程序时运行)获取特权。
solution:Upgrade checkpoint vpn-1 to a higher version than *,4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp5a,4.1:sp6,and avoid the version 4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp5a,4.1:sp6