PT-2002-3117 · Check Point · Check Point Next Generation+1

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2405

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Check Point FireWall-1 versions 4.1 Check Point Next Generation (NG)

Description The issue allows remote attackers to bypass the firewall and pass unauthorized traffic, including HTTPS and FTP, when UserAuth is configured to proxy HTTP traffic only.

Recommendations For Check Point FireWall-1 version 4.1, reconfigure UserAuth to properly restrict traffic. For Check Point Next Generation (NG), reconfigure UserAuth to properly restrict traffic.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-2405

Produtos afetados

Check Point Firewall-1

Check Point Next Generation

Referências · 5

• http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html · Nota
• http://securityfocus.com/bid/5744 · Nota
• http://iss.net/security_center/static/10139.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2405 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2405 · Nota