PT-2001-2584 · Check Point · Check Point Vpn-1

Publicado 2001-12-31 · Atualizado 2017-07-11 · CVE-2001-1499

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 version 4.1SP4

Description The issue allows remote attackers to more easily conduct brute force attacks due to the different error messages returned for valid and invalid users. This variation in error messages depends on the authentication method being used.

Recommendations For Check Point VPN-1 version 4.1SP4, consider implementing additional authentication measures or rate limiting to mitigate the risk of brute force attacks.

Correção

Identificadores relacionados

CVE-2001-1499

Produtos afetados

Check Point Vpn-1

Referências · 6

• http://osvdb.org/20210 · Nota
• http://securityfocus.com/bid/3470 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7343 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1499 · Nota de Segurança
• http://securityfocus.com/archive/1/222479 · Nota
• http://securityfocus.com/archive/1/222366 · Nota