CVE-2001-1176

Published: Jul 12, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

Affected (11)

Products: Checkpoint: Firewall 1, Provider 1, Vpn 1

3 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Firewall 1	Version 4.1
Checkpoint Firewall 1	Version 4.1 sp1
Checkpoint Firewall 1	Version 4.1 sp2
Checkpoint Firewall 1	Version 4.1 sp3
Checkpoint Provider 1	Version 4.1
Checkpoint Provider 1	Version 4.1 sp1
Checkpoint Provider 1	Version 4.1 sp2
Checkpoint Provider 1	Version 4.1 sp3
Checkpoint Vpn 1	Version 4.1
Checkpoint Vpn 1	Version 4.1 sp1
Checkpoint Vpn 1	Version 4.1 sp3