Checkpoint

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-1499 1Checkpoint 1Vpn 1 Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers...Show more Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.Show less
CVE-2001-1431 2Checkpoint Nokia 3Firewall 1 Firewall ApplianceVpn 1 Apr 16, 2026 Oct 8, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender...Show more Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information.Show less
CVE-2001-0940 1Checkpoint 1Firewall 1 Apr 16, 2026 Sep 21, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.
CVE-2001-1102 1Checkpoint 1Firewall 1 Apr 16, 2026 Sep 8, 2001 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
CVE-2001-1101 1Checkpoint 1Firewall 1 Apr 16, 2026 Sep 8, 2001 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbi...Show more The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.Show less
CVE-2000-1201 1Checkpoint 1Firewall 1 Apr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
CVE-2001-0682 2Checkpoint Zonelabs 2Zonealarm Zonealarm Pro Apr 16, 2026 Aug 29, 2001 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.
CVE-2001-1303 1Checkpoint 1Firewall 1 Apr 16, 2026 Jul 18, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.
CVE-2001-1176 1Checkpoint 3Firewall 1 Provider 1Vpn 1 Apr 16, 2026 Jul 12, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
CVE-2001-1158 1Checkpoint 1Firewall 1 Apr 16, 2026 Jul 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrar...Show more Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.Show less
CVE-2001-0182 1Checkpoint 1Firewall 1 Apr 16, 2026 Mar 26, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the consol...Show more FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.Show less
CVE-2001-0082 1Checkpoint 1Firewall 1 Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.
CVE-2000-1037 1Checkpoint 1Firewall 1 Apr 16, 2026 Dec 11, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via...Show more Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.Show less
CVE-2000-1032 1Checkpoint 1Firewall 1 Apr 16, 2026 Dec 11, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames...Show more The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.Show less
CVE-2000-0813 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection E...Show more Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."Show less
CVE-2000-0809 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service.
CVE-2000-0808 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s...Show more The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."Show less
CVE-2000-0807 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."
CVE-2000-0806 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."
CVE-2000-0805 1Checkpoint 1Firewall 1 Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."

Previous 1 2 3 4 567 Next