CVE-2001-0940 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Checkpoint Firewall-1

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
8.5%
top 7.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Checkpoint Firewall-1
Timeline
PublishedSep 21
Latest updateApr 30

Description

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDcheckpoint/firewall-14.0, 4.1+1

Patches

Patch: archives.neohapsis.com ↗Patch: archives.neohapsis.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5rrc-cm4j-679m: Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4↗2022-04-30
▶
CVEList
CVE-2001-0940: Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4↗2002-06-25
▶