Vulnerabilities > CVE-2000-0116 - Unspecified vulnerability in Checkpoint Firewall-1 3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
checkpoint
exploit available

Summary

Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.

Vulnerable Configurations

Part Description Count
Application
Checkpoint
1

Exploit-Db

descriptionCheck Point Software Firewall-1 3.0 Script Tag Checking Bypass Vulnerability. CVE-2000-0116. Remote exploits for multiple platform
idEDB-ID:19732
last seen2016-02-02
modified2000-01-29
published2000-01-29
reporterArne Vidstrom
sourcehttps://www.exploit-db.com/download/19732/
titleCheck Point Software Firewall-1 3.0 Script Tag Checking Bypass Vulnerability