A Stateful Inspection of FireWall-1

A Stateful Inspection of FireWall-1 Thomas Lopatic, John McDonald TUV data protect GmbH tl,[email protected] Dug Song Center for Information Technology Integration University of Michigan [email protected] 1 Introduction -------------- At the Black Hat Briefings 2000, we presented an analysis of...

CVE-2000-0582

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion (Denial of Service)

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the...

CVE-2000-0482

Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets...

Check Point Software Firewall-1 4.0/1 4.1 - Fragmented Packets Denial of Service

// source: https://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1 rulebase cannot prevent this atta...

CVE-2000-0150

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...

Check Point FireWall-1 UDP Port 0 DoS

It was possible to crash either the remote host or the firewall in between us and the remote host by sending an UDP packet going to port 0. This flaw may allow an attacker to shut down your network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10074;...

CVE-1999-0675

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...

Check Point FireWall-1 Identification

The remote host has the three TCP ports 256, 257, and 258 open. It's very likely that this host is a Check Point FireWall/1. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10044; scriptversion...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...