CVE-2001-1499

Published: Dec 31, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Affected (1)

Products: Checkpoint: Vpn 1

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Vpn 1	Version 4.1 sp4

References (10)

http://www.osvdb.org/20210

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/222366

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/222479

Source: cve@mitre.org

http://www.securityfocus.com/bid/3470

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7343

Source: cve@mitre.org

http://www.osvdb.org/20210

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/222366

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/222479

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3470

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7343

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.