CVE-2001-1176: Undefined Security Weakness

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection...

CVE-2001-1158: Undefined Security Weakness

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

CVE-2001-0940: Undefined Security Weakness

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...

CVE-2002-0428

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the toexpire or expire values in the client's users.C configuration file...

CVE-2002-0428

The CVE-2002-0428 issue affects Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1. A vulnerability in the client configuration allows bypassing the authentication timeout by modifying the to_expire or expire values in the users.C file, potentially extending session validity beyond intended...

CVE-2002-0428: Undefined Security Weakness

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the toexpire or expire values in the client's users.C configuration file...

CVE-2001-1171

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy...

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

CVE-2001-1171

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy...

CVE-2001-1102

CVE-2001-1102 affects Check Point FireWall-1 on Solaris, vulnerable in versions 3.0b through 4.1. A symlink attack on temporary policy files ending in .cpp, which are world-writable, allows local users to overwrite arbitrary files, impacting confidentiality, integrity, and availability. The descr...

CVE-2001-1101

The CVE-2001-1101 entry concerns the Check Point FireWall-1 GUI on Solaris (3.0b–4.1 SP2). The vulnerability arises in the Log Viewer function, which does not validate the existence of .log files when saving, enabling: (1) remote authenticated users to overwrite arbitrary files ending in .log, an...

CVE-2001-1171

The CVE affects Check Point Firewall-1, version 3.0b through 4.0 SP1. The root cause is a symlink-following issue during policy rule compilation that creates a world-writable temporary .cpp file, enabling local users to gain privileges or modify the firewall policy. No exploitation details or in-...

CVE-2001-1171: Undefined Security Weakness

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy...

CVE-2001-1101: Undefined Security Weakness

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...

CVE-2001-1102: Undefined Security Weakness

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

CVE-1999-1204

CVE-1999-1204 affects Check Point Firewall-1. It stems from improper handling of certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which can produce a rule defaulting to an ANY address and grant access to more systems than intended. CVSSv2 score 7.5 (HIGH) with Network...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-1999-1204: Undefined Security Weakness

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-2001-1499

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks...