CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

CVE-2007-3906

Mode C: CVE-2007-3906 affects Kaspersky Anti-Virus for Check Point FireWall-1. The vulnerability (unspecified vectors) may cause a denial-of-service kernel hang in all affected installs prior to Critical Fix 1 (version 5.5.161.0). Impact is partial availability; attacker role is not clearly defin...

CVE-2007-3906

Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 5.5.161.0 might allow attackers to cause a denial of service kernel hang via unspecified vectors. NOTE: it is not clear whether there is an attacker role...

Kaspersky Anti-Virus for Check Point FireWall-1 Unspecified DoS

The version of Kaspersky Anti-Virus for Check Point FireWall-1 installed on the remote host suffers from an as-yet unspecified issue in which the antivirus kernel may freeze. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25710; scriptversion"1.19"; scriptcvsdate"Dat...

Kaspersky Anti-Virus 5.5 for Check Point Firewall-1拒绝服务漏洞

Kaspersky Anti-Virus是一款反防毒解决方案。 Kaspersky Anti-Virus 5.5 for Check Point Firewall-1存在未明安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Kaspersky Anti-Virus for Check Point Firewall-1 5.5 可参考如下安全公告获得补丁信息； http://support.kaspersky.com/checkpoint?qid=208279464...

CVE-2004-2679

CVE-2004-2679 affects Check Point Firewall-1 4.1 up to NG AI R55. The vulnerability arises when an attacker sends an Internet Key Exchange (IKE) message with a crafted Vendor ID payload, causing the firewall to reveal version information and potentially other details in its response. This is an i...

Check Point FireWall-1 ICA Service Detection

The remote host is running Check Point FireWall-1 and is operating a web server on this port for its internal certificate authority ICA, which provides users with certificate revocation lists and registers users when using the Policy Server. Note that it is not known whether it is possible to...

Check Point R55W Directory Traversal

Overview Check Point Firewall-1 R55W contains a hard coded web server, which runs on TCP port 18264. This server is there to deal with PKI requirements for Check Point's VPN functionality. During a routine penetration test of a client, Sec-Tec discovered a directory traversal vulnerability that...

CVE-2004-2679

Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange IKE with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information...

HTTP Parsing Vulnerabilities in Check Point Firewall-1

Overview Several versions of Check Point Firewall-1 contain a vulnerability that allows remote attackers to execute arbitrary code with administrative privileges. Description The HTTP Security Servers component of Check Point Firewall-1 contains an HTTP parsing vulnerability that is triggered by...

CVE-2003-0757

Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet...

CVE-2001-1303

The CVE-2001-1303 entry describes an information-disclosure vulnerability in Check Point Firewall-1 where SecuRemote’s default configuration allows remote attackers to obtain sensitive configuration information for the protected network without authentication. Affected component: SecuRemote (part...

CVE-2002-2405

Check Point FireWall-1 4.1 and Next Generation NG, with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall...

CVE-2002-0428

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the toexpire or expire values in the client's users.C configuration file...

CVE-2001-1171

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy...

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

CVE-2000-1201

Check Point FireWall-1 allows remote attackers to cause a denial of service high CPU via a flood of packets to port 264...

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...