CVE-2000-0116

Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutabl...

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass

source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutable by the browser. In version 3, this function can be bypassed by...

CVE-1999-0770

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems...

CVE-1999-0770

CVE-1999-0770 affects Firewall-1, where a long timeout on connections that start with ACK/non-SYN packets enables a denial of service by mass connection attempts to unresponsive systems. Red Hat and CVE records corroborate the symptom; Nessus describes a remote DoS attack via the ACK/stream attac...

CVE-1999-0895

Firewall-1 does not properly restrict access to LDAP attributes...

Check Point FireWall-1 UDP Port 0 DoS

It was possible to crash either the remote host or the firewall in between us and the remote host by sending an UDP packet going to port 0. This flaw may allow an attacker to shut down your network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10074;...

fw-1.lpsnoop.pl

Date: Fri, 25 Sep 1998 18:24:58 -0400 From: Andrew Danforth Subject: Re: Firewall-1 3.0b Session Agent On Fri, 25 Sep 1998, Brooke Paul wrote: -----Original Message----- From: Larry Pingree SMTP:[email protected] A problem exists in the Firewall-1 3.0b Session Agent All communications from the...

CVE-1999-0675

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service source: https://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1...

Check Point Software Firewall-1 3.0/1 4.0 - Table Saturation Denial of Service

source: https://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1 handles TCP connections. Typically to initiate a TCP connection, a SYN packet i...

Check Point FireWall-1 Identification

The remote host has the three TCP ports 256, 257, and 258 open. It's very likely that this host is a Check Point FireWall/1. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10044; scriptversion...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...