CPE Details
Checkpoint Firewall-1 4.1 Build 41439
4.1_build_41439
2007-08-23
19h16 +00:00
19h16 +00:00
2007-09-14
15h36 +00:00
15h36 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:checkpoint:firewall-1:4.1_build_41439:*:*:*:*:*:*:*
Informations
Vendor
checkpointProduct
firewall-1Version
4.1_build_41439Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI. | 10 |
|||
| Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts. | 7.5 |
|||
| Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator. | 7.5 |
|||
| Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. | 5 |
