CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

CVE-2000-1037

The CVE-2000-1037 issue affects Check Point Firewall-1 session agent versions 3.0 through 4.1. The root cause is that the service returns different error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames and perform brute-force passwor...

CVE-2000-0813

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers "FTP Bounce" via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."...

CVE-2000-0807

The OPSEC communications authentication mechanism fwn1 in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."...

CVE-2000-0806

The inter-module authentication mechanism fwa1 in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."...

CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."...

CVE-2000-0809

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service...

CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."...

CVE-2000-0779

Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests...

CVE-2000-0582

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

CVE-2000-0582

CVE-2000-0582 affects Check Point FireWall-1 releases 4.0 and 4.1. A remote attacker can cause a denial of service by sending a stream of invalid commands (e.g., binary zeros) to the SMTP Security Server proxy. The available sources confirm the affected product/versions and the impact as describe...

CVE-2000-0482

Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets...

CVE-1999-0675

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...

CVE-1999-0675

CVE-1999-0675 : The vulnerability affects Check Point FireWall-1. An attacker can cause a denial of service by sending UDP packets through VPN-1 to port 0 of a host, potentially crashing the remote host or the firewall between the attacker and the target. The available sources describe this DoS c...

CVE-2000-0116

Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...

CVE-2000-0482

The CVE-2000-0482 issue affects Check Point Firewall-1, where an attacker can cause a denial-of-service by sending a flood of malformed fragmented IP packets. Public sources (e.g., CERT/CC and vendor advisories) describe the DoS as resulting from CPU/memory saturation due to fragmentation handlin...

CVE-2000-0779

CVE-2000-0779 : Check Point FireWall-1 with the RSH/REXEC setting enabled is vulnerable to remote bypass of access controls via malformed RSH/REXEC connection requests. The root cause is improper handling of certain RSH/REXEC-related data (stderr handling) that allows bypass of restrictions. All ...

CVE-2000-0779

Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests...

CVE-2000-0116

The CVE-2000-0116 entry affects Firewall-1. The vulnerability arises from insufficient filtering of script tags; attackers can bypass the Strip Script Tags restriction by prefixing an extra