CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...

Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336)

Check Point response to FireWall-1 GUI Log Viewer Vulnerability An issue exists in VPN-1/FireWall-1 Management Servers running on Windows NT or Windows 2000. A malicious administrator can exploit a buffer overflow condition in the GUI authentication code to potentially impair management station...

CVE-2000-1201

CVE-2000-1201 affects Check Point FireWall-1 and remote DoS is caused by a flood of packets to port 264. The available data shows a network-based vulnerability with a CVSS v2 base score of 5.0 (Medium) and no confidentiality/integrity impact, partial availability impact. No explicit exploitation ...

CVE-2000-1201

Check Point FireWall-1 allows remote attackers to cause a denial of service high CPU via a flood of packets to port 264...

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...

Символьные линки в Check Point (symbolic links)

Можно перезаписать любые файлы данными пользователя...

CVE-2000-1201

Check Point FireWall-1 allows remote attackers to cause a denial of service high CPU via a flood of packets to port 264...

CVE-2001-1303

The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication...

Check Point Firewall-1 4 Securemote - Network Information Leak

Check Point Firewall-1 4 Securemote - Network Information Leak source: https://www.securityfocus.com/bid/3058/info SecureRemote is the proprietary VPN infrastructure designed by Check Point Software, and included with some versions of Firewall-1. A problem with the package allows remote users to...

Check Point Firewall-1 4 Securemote - Network Information Leak

source: https://www.securityfocus.com/bid/3058/info SecureRemote is the proprietary VPN infrastructure designed by Check Point Software, and included with some versions of Firewall-1. A problem with the package allows remote users to gain information about internal networks. Older versions of the...

Check Point Firewall-1 4.x - SecuRemote Internal Interface Address Information Leakage

Check Point Firewall-1 4.x - SecuRemote Internal Interface Address Information Leakage // source: https://www.securityfocus.com/bid/8524/info An information leakage issue has been discovered in Check Point Firewall-1. Because of this, an attacker may gain sensitive information about network...

Check Point Firewall-1 4.x - SecuRemote Internal Interface Address Information Leakage

// source: https://www.securityfocus.com/bid/8524/info An information leakage issue has been discovered in Check Point Firewall-1. Because of this, an attacker may gain sensitive information about network resources. // / The syntax is: / / fw1getints start IP address end IP address / / / / Author...

CVE-2001-1176

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection...

Check Point FireWall-1 RDP Bypass Vulnerability

FOR PUBLIC RELEASE ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 1.2 2001-07-09 ------------------------------------------------------------------------ The latest version of this document is available at...

Advisory CA-2001-17

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-17 Check Point RDP Bypass Vulnerability Original release date: July 09, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Check Point VPN-1 and FireWall-1 Version 4.1 Overview A...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

Check Point RDP Bypass Vulnerability

Overview Check Point VPN-1/FireWall-1 version 4.0 & 4.1 may allow an intruder to pass traffic through the firewall on port 259. Description Firewall-1 and VPN-1 include support for RDP, but do not provide adequate security controls for RDP data. By adding a faked RDP header to typical UDP traffic...

Check Point FireWall-1 HTTP Client Authentication Detection

The Check Point FireWall-1 Client Authentication web server is used to authenticate a user via HTTP. Once authenticated, the user can get more privileges on the network ie: get access to hosts which were previously blocked by the firewall. C Tenable Network Security, Inc. include"compat.inc";...

Check Point FireWall-1 Telnet Client Authentication Detection

The Check Point FireWall-1 Client Authentication server is used to authenticate a user via telnet. Once authenticated, the user can get more privileges on the network ie, get access to hosts that were previously blocked by the firewall. C Tenable Network Security, Inc. include"compat.inc";...