PT-2009-3770 · Check Point · Check Point Firewall-1

Bugs Nothugs · Publicado 2009-04-02 · Atualizado 2024-08-07 · CVE-2009-1227

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Firewall-1 PKI Web Service (affected versions not specified)

Description A buffer overflow issue in the PKI Web Service allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long Authorization or Referer HTTP header to TCP port 18624. The vendor has disputed this issue, stating that they were unable to reproduce the attack and consider it to pose no risk to their customers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1227

Produtos afetados

Check Point Firewall-1

Referências · 7

• 🔥 http://securitytracker.com/id?1021948 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html · Exploit
• 🔥 http://securityfocus.com/bid/34286 · Exploit
• 🔥 https://exploit-db.com/exploits/8313 · Exploit
• https://t.me/cvenotify/89577 · Publicação no Telegram
• http://securityfocus.com/archive/1/502256/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1227 · Nota de Segurança