FI
Product
Firewall-1
43
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Firewall-1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 2.0; next_generation_fp0; next_generation_fp1; next_generation_fp2 |
| CVE-2006-3885 | – | Jul 27 | Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded Affected: r55w; r55w; r55w |
| CVE-2005-3673 | – | Nov 18 | The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as… Affected: 3.0 |
| CVE-2004-2679 | – | Dec 31 | Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +12 more |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 2.0; next_generation_fp0; next_generation_fp1; next_generation_fp2 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 2.0; next_generation_fp0; next_generation_fp1; next_generation_fp2 |
| CVE-2004-0699 | – | Sep 28 | Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by… Affected: 4.1 |
| CVE-2004-0469 | – | Jul 7 | Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1… Affected: 2.0; 2.0.1 |
| CVE-2004-0040 | – | Mar 3 | Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +3 more |
| CVE-2004-0039 | – | Mar 3 | Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server… Affected: All versions, or not specified |
| CVE-2003-0757 | – | Oct 20 | Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264,… Affected: 4.0; 4.1 |
| CVE-2002-2405 | – | Dec 31 | Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly… Affected: 4.1; ng |
| CVE-2002-0428 | – | Aug 12 | Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +9 more |
| CVE-2001-1171 | – | Apr 1 | Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain… Affected: 3.0b |
| CVE-2001-1431 | – | Oct 8 | Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and… Affected: 4.1; 4.1; 4.1 |
| CVE-2001-0940 | – | Sep 21 | Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name Affected: 4.0; 4.1 |
| CVE-2001-1101 | – | Sep 8 | The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1)… Affected: 3.0; 4.0; 4.1; 4.1; 4.1 |
| CVE-2001-1102 | – | Sep 8 | Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension,… Affected: 3.0; 4.0; 4.1; 4.1 |
| CVE-2000-1201 | – | Aug 31 | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264 Affected: All versions, or not specified |
| CVE-2001-1303 | – | Jul 18 | The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without… Affected: 4.0; 4.1; 4.1; 4.1; 4.1; 4.1 |
| CVE-2001-1176 | – | Jul 12 | Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control… Affected: 4.1; 4.1; 4.1; 4.1 |
| CVE-2001-1158 | – | Jul 9 | Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal… Affected: 4.1; 4.1; 4.1_build_41439 |
| CVE-2001-0182 | – | Mar 26 | FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the… Affected: 4.1; 4.1; 4.1 |
| CVE-2001-0082 | – | Feb 12 | Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets Affected: 4.1 |
| CVE-2000-1037 | – | Dec 11 | Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-1032 | – | Dec 11 | The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows… Affected: 3.0; 4.0 |
| CVE-2000-0807 | – | Nov 14 | The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0806 | – | Nov 14 | The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0804 | – | Nov 14 | Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0805 | – | Nov 14 | Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0813 | – | Nov 14 | Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0809 | – | Nov 14 | Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0808 | – | Nov 14 | The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0779 | – | Oct 20 | Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0582 | – | Jun 30 | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server… Affected: 4.0; 4.1 |
| CVE-2000-0482 | – | Jun 6 | Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets Affected: 4.0; 4.1 |
| CVE-2000-0181 | – | Mar 11 | Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the… Affected: 3.0; 4.0; 4.1 |
| CVE-2000-0150 | – | Feb 12 | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid… Affected: 3.0; 4.0 |
| CVE-2000-0116 | – | Jan 29 | Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag Affected: 3.0 |
| CVE-1999-0895 | – | Oct 20 | Firewall-1 does not properly restrict access to LDAP attributes Affected: 4.0 |
| CVE-1999-0675 | – | Aug 9 | Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host Affected: 3.0; 4.0 |
| CVE-1999-0770 | – | Jul 29 | Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of… Affected: 3.0; 4.0 |
| CVE-1999-1204 | – | May 11 | Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY"… Affected: All versions, or not specified |
Showing 43