CVE-2001-1101

Published: Sep 8, 2001Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Affected (5)

Products: Checkpoint: Firewall 1

Checkpoint

1 product

Firewall 1

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Firewall 1	Version 3.0
Checkpoint Firewall 1	Version 4.0
Checkpoint Firewall 1	Version 4.1
Checkpoint Firewall 1	Version 4.1 sp1
Checkpoint Firewall 1	Version 4.1 sp2