CVE-2001-1101

published 2001-09-08

CVE-2001-1101: The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files…

Priority P4 15 medium 6.4 CVSS 2.0

AV N AC L Au N C N I P A P

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
checkpoint	firewall-1	—	—
checkpoint	firewall-1	—	—
checkpoint	firewall-1	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.