Vulnerabilities > Checkpoint
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2001-03-26 | CVE-2001-0182 | Unspecified vulnerability in Checkpoint Firewall-1 4.1 FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources. | 5.0 |
2001-02-12 | CVE-2001-0082 | Unspecified vulnerability in Checkpoint Firewall-1 4.1 Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets. | 7.5 |
2000-12-11 | CVE-2000-1037 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack. | 7.5 |
2000-12-11 | CVE-2000-1032 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0 The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall. | 5.0 |
2000-11-14 | CVE-2000-0813 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass." | 5.0 |
2000-11-14 | CVE-2000-0809 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service. | 5.0 |
2000-11-14 | CVE-2000-0808 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication." | 7.5 |
2000-11-14 | CVE-2000-0807 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability." | 7.5 |
2000-11-14 | CVE-2000-0806 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass." | 5.0 |
2000-11-14 | CVE-2000-0805 | Unspecified vulnerability in Checkpoint Firewall-1 3.0/4.0/4.1 Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets." | 7.5 |