PT-2000-1135 · Check Point · Check Point Firewall-1

Published 2000-02-12 · Updated 2018-10-30 · CVE-2000-0150

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Firewall-1 (affected versions not specified)

Description The issue allows remote attackers to bypass port access restrictions on an FTP server. This is achieved by forcing the server to send malicious packets that are misinterpreted as a valid 227 response to a client's PASV attempt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0150

Affected Products

Check Point Firewall-1

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0150 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0150 · Note
• http://securityfocus.com/bid/979 · Note
• http://osvdb.org/4417 · Note
• http://kb.cert.org/vuls/id/328867 · Note