PT-2000-1947 · Check Point · Check Point Firewall-1

Publicado 2000-12-11 · Atualizado 2008-09-05 · CVE-2000-1037

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Firewall-1 session agent versions 3.0 through 4.1

Description The issue allows remote attackers to determine valid usernames and guess a password via a brute force attack, due to different error messages being generated for invalid user names versus invalid passwords.

Recommendations For versions 3.0 through 4.1, consider modifying the error message handling to prevent disclosure of valid usernames, and implement additional security measures such as account lockout policies or rate limiting to mitigate the risk of brute force attacks.

Exploit

Correção

Identificadores relacionados

CVE-2000-1037

Produtos afetados

Check Point Firewall-1

Referências · 6

• 🔥 https://exploit-db.com/exploits/20215 · Exploit
• 🔥 http://securityfocus.com/bid/1662 · Exploit
• 🔥 https://exploit-db.com/exploits/20216 · Exploit
• http://securityfocus.com/archive/1/76389 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1037 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1037 · Nota de Segurança