Checkpoint VPN-1 4.1_SP4

CPE Details

Checkpoint VPN-1 4.1_SP4
checkpoint
vpn-1
4.1
2007-08-23
19h16 +00:00
2008-04-07
11h43 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*

Informations

Vendor

checkpoint

Product

vpn-1

Version

4.1

Update

sp4

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2006-0255 2006-01-18 01h00 +00:00 Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the Sr_GUI.exe program.
7.2
CVE-2001-1499 2005-06-21 02h00 +00:00 Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
5
CVE-2001-1431 2005-03-24 04h00 +00:00 Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information.
5
CVE-2004-0699 2004-09-14 02h00 +00:00 Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
7.5
CVE-2001-1176 2002-06-25 02h00 +00:00 Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
7.5