checkpoint vpn-1 firewall-1 4.0 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote malicious users to determine valid usernames by (1) monitoring respon...

Checkpoint Vpn-1 Firewall-1 4.0 Checkpoint Vpn-1 Firewall-1 4.1

7.5

CVSSv2

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and previous versions allows remote malicious users to spoof connections, aka the "OPSEC Authentication Vulnerability."

Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0 Checkpoint Firewall-1 4.1

7.5

CVSSv2

Check Point VPN-1/FireWall-1 4.1 and previous versions improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."

Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0 Checkpoint Firewall-1 4.1

5

CVSSv2

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and previous versions may allow remote malicious users to conduct a denial of service, aka "Inter-module Communications Bypass."

Checkpoint Firewall-1 4.1 Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0

5

CVSSv2

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and previous versions allows remote malicious users to cause a denial of service.

Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0 Checkpoint Firewall-1 4.1

7.5

CVSSv2

Check Point VPN-1/FireWall-1 4.1 and previous versions allows remote malicious users to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."

Checkpoint Firewall-1 4.1 Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0

5

CVSSv2

Check Point VPN-1/FireWall-1 4.1 and previous versions allows remote malicious users to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."

Checkpoint Firewall-1 4.1 Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0

7.5

CVSSv2

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and previous versions allows remote malicious users to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."

Checkpoint Firewall-1 4.1 Checkpoint Firewall-1 3.0 Checkpoint Firewall-1 4.0

5

CVSSv2

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.

Checkpoint Firewall-1 4.0 Checkpoint Firewall-1 3.0

7.5

CVSSv2

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote malicious users to execute arbitrary code via a long user name.

Checkpoint Firewall-1 4.0 Checkpoint Firewall-1 4.1

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook