Approved changes feed: RSS · Atom

cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*

part: a version: 4.1 update: sp1

VendorCheckpoint (963cc759-0773-5380-992a-923d56af82ce)
ProductFirewall 1 (cc24dfe3-b9bd-5add-92ee-0f590378cfd4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2679 vulnerable 2026-06-03 14:26:48.416463 Details available
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information.
Published: 2007-02-27T02:00:00.000Z
Updated: 2024-08-08T01:36:25.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0040 vulnerable 2026-06-03 14:26:33.904594 Details available
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:01:23.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0428 vulnerable 2026-06-03 14:26:14.251043 Details available
Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1303 vulnerable 2026-06-03 14:26:12.126999 Details available
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T04:51:07.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1176 vulnerable 2026-06-03 14:26:03.110948 Details available
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:44:08.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1102 vulnerable 2026-06-03 14:26:02.953272 Details available
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
Published: 2002-03-15T05:00:00.000Z
Updated: 2024-08-08T04:44:07.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1101 vulnerable 2026-06-03 14:26:02.952804 Details available
The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
Published: 2002-03-15T05:00:00.000Z
Updated: 2024-08-08T04:44:07.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.