CVE-2001-1176 — Use of Externally-Controlled Format String in Checkpoint Firewall-1

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
2.3%
top 15.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Checkpoint Firewall-1Checkpoint Provider-1Checkpoint Vpn-1
Timeline
PublishedJul 12
Latest updateApr 30

Description

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

Patches

Patch: archives.neohapsis.com ↗Patch: www.securityfocus.com ↗Patch: archives.neohapsis.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9qqc-r43h-9vjq: Format string vulnerability in Check Point VPN-1/FireWall-1 4↗2022-04-30
▶
CVEList
CVE-2001-1176: Format string vulnerability in Check Point VPN-1/FireWall-1 4↗2002-06-25
▶