PT-2000-1947 · Check Point · Check Point Firewall-1

Published 2000-12-11 · Updated 2008-09-05 · CVE-2000-1037

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Firewall-1 session agent versions 3.0 through 4.1

Description The issue allows remote attackers to determine valid usernames and guess a password via a brute force attack, due to different error messages being generated for invalid user names versus invalid passwords.

Recommendations For versions 3.0 through 4.1, consider modifying the error message handling to prevent disclosure of valid usernames, and implement additional security measures such as account lockout policies or rate limiting to mitigate the risk of brute force attacks.

Exploit

Fix

Related Identifiers

CVE-2000-1037

Affected Products

Check Point Firewall-1

References · 6

• 🔥 https://exploit-db.com/exploits/20215 · Exploit
• 🔥 http://securityfocus.com/bid/1662 · Exploit
• 🔥 https://exploit-db.com/exploits/20216 · Exploit
• http://securityfocus.com/archive/1/76389 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1037 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1037 · Note