CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled is affected by CVE-2001-0082. The issue allows remote attackers to bypass access restrictions by sending malformed, fragmented packets, enabling partial confidentiality, integrity, and availability impacts. The primary documents do not pr...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2000-0808

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...

CVE-2000-1032

CVE-2000-1032 affects Check Point Firewall-1 4.0 and earlier. The client authentication interface returns distinct error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames on the firewall. The existing records do not provide concrete de...

CVE-2000-0813

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers "FTP Bounce" via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."...

CVE-2000-0813

Technical details about CVE-2000-0813 are not publicly provided in the connected documents you supplied. The materials do not specify affected products/versions beyond Check Point VPN-1/FireWall-1 4.1 and earlier, nor concrete remediation steps. Monitor for updates.

CVE-2000-0806

The CVE-2000-0806 issue affects Check Point VPN-1/FireWall-1 4.1 and earlier, specifically the inter-module authentication mechanism (FWA1). The vulnerability allows remote attackers to cause a denial of service via inter-module communications bypass. The root cause is a flaw in FWA1 authenticati...

CVE-2000-0804

The vulnerability CVE-2000-0804 affects Check Point VPN-1/FireWall-1 4.1 and earlier. It is caused by a flaw in handling fragmented TCP connection requests or reopening closed one-way connections, allowing remote attackers to bypass the directionality check (One-way Connection Enforcement Bypass)...

CVE-2000-0809

The vulnerability CVE-2000-0809 is a buffer overflow in the GetKey routine of the inter-module communication protocol checker (Getkey) in Check Point VPN-1/FireWall-1 4.1 and earlier. This flaw allows remote attackers to crash the firewall daemon, leaving policy enforcement in place but potential...

CVE-2000-0809

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service...

CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."...

CVE-2000-0807

The OPSEC Authentication Spoof issue (CVE-2000-0807) affects Check Point VPN-1/FireWall-1 prior to the patches described in the ISS/FireWall-1 vulnerability alert. The security hole arises in the OPSEC authentication mechanism, allowing a remote attacker to spoof authentication and gain access to...

CVE-2000-0805

CVE-2000-0805 affects Check Point VPN-1/FireWall-1 4.1 and earlier. The issue is "Retransmission of Encapsulated Packets": any source can send specially encapsulated FWZ packets that bypass normal rule checks and anti-spoofing, effectively spoofing as a FWZ client. All versions prior to the relev...

CVE-2000-0808

CVE-2000-0808 affects Check Point VPN-1/FireWall-1 (4.1 and earlier). The S/Key inter-module authentication Brute Force Vulnerability allows remote attackers to bypass authentication by brute-forcing the secret key, potentially enabling access to protected assets. Impact aligns with partial confi...

CVE-2000-0806

The inter-module authentication mechanism fwa1 in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."...

CVE-2000-0807

The OPSEC communications authentication mechanism fwn1 in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."...

CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."...

CVE-2000-1032

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall...

Check Point FireWall-1 allows fragmented packets through firewall if Fast Mode is enabled

Overview If any rules include the "Fast Mode" option, Check Point Firewall-1 and VPN-1 will incorrectly allow unauthorized connection attempts to hosts that should be restricted. Description A feature called "Fast Mode" or "FASTPATH", included in Check Point FireWall-1 and VPN-1 is designed to...