Lucene search

[email protected]CVE-2000-0807

HistoryNov 14, 2000 - 5:00 a.m.

CVE-2000-0807

2000-11-1405:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

information security

vulnerability

opsec

check point

vpn-1

firewall-1

spoofing

remote attack

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.3%

JSON

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the “OPSEC Authentication Vulnerability.”

CPENameOperatorVersion
checkpoint:firewall-1checkpoint firewall-1eq3.0
checkpoint:firewall-1checkpoint firewall-1eq4.1
checkpoint:firewall-1checkpoint firewall-1eq4.0

CPE	Name	Operator	Version
checkpoint:firewall-1	checkpoint firewall-1	eq	3.0
checkpoint:firewall-1	checkpoint firewall-1	eq	4.1
checkpoint:firewall-1	checkpoint firewall-1	eq	4.0

References

www.checkpoint.com/techsupport/alerts/list_vun.html#OPSEC_Authentication

www.osvdb.org/4420

exchange.xforce.ibmcloud.com/vulnerabilities/5471

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.3%

JSON

Related for CVE-2000-0807

securityvulns1