PT-2001-2584 · Check Point · Check Point Vpn-1

Published 2001-12-31 · Updated 2017-07-11 · CVE-2001-1499

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 version 4.1SP4

Description The issue allows remote attackers to more easily conduct brute force attacks due to the different error messages returned for valid and invalid users. This variation in error messages depends on the authentication method being used.

Recommendations For Check Point VPN-1 version 4.1SP4, consider implementing additional authentication measures or rate limiting to mitigate the risk of brute force attacks.

Fix

Related Identifiers

CVE-2001-1499

Affected Products

Check Point Vpn-1

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2001-1499 · Security Note
• http://osvdb.org/20210 · Note
• http://securityfocus.com/bid/3470 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7343 · Note
• http://securityfocus.com/archive/1/222479 · Note
• http://securityfocus.com/archive/1/222366 · Note