PT-2000-1516 · Check Point · Check Point Firewall-1

Published 2000-06-30 · Updated 2008-09-10 · CVE-2000-0582

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Check Point FireWall-1 versions 4.0 through 4.1

Description The issue allows remote attackers to cause a denial of service by sending a stream of invalid commands, such as binary zeros, to the SMTP Security Server proxy.

Recommendations For versions 4.0 and 4.1, consider restricting access to the SMTP Security Server proxy until a fix is available. As a temporary workaround, consider implementing firewall rules to filter out invalid commands, such as binary zeros, to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0582

Affected Products

Check Point Firewall-1

References · 7

• 🔥 https://exploit-db.com/exploits/20049 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0582 · Security Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630162106.4619C-100000%40fjord.fscinternet.com · Note
• http://checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security · Note
• http://osvdb.org/1438 · Note
• http://securityfocus.com/bid/1416 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0582 · Note