Vulnerabilities > Checkpoint > Firewall 1 > 3.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-11-18 | CVE-2005-3673 | Denial of Service vulnerability in Check Point Firewall-1 and VPN-1 ISAKMP IKE The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. | 7.8 |
| 2001-09-08 | CVE-2001-1102 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable. | 6.2 |
| 2001-09-08 | CVE-2001-1101 | Symbolic Link vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack. | 6.4 |
| 2000-12-11 | CVE-2000-1037 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack. | 7.5 |
| 2000-12-11 | CVE-2000-1032 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0 The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall. | 5.0 |
| 2000-11-14 | CVE-2000-0813 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass." | 5.0 |
| 2000-11-14 | CVE-2000-0809 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service. | 5.0 |
| 2000-11-14 | CVE-2000-0808 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication." | 7.5 |
| 2000-11-14 | CVE-2000-0807 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability." | 7.5 |
| 2000-11-14 | CVE-2000-0806 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass." | 5.0 |