Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
checkpoint firewall-1 4.0
checkpoint firewall-1 3.0