PT-2002-3117 · Check Point · Check Point Next Generation+1

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2405

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Check Point FireWall-1 versions 4.1 Check Point Next Generation (NG)

Description The issue allows remote attackers to bypass the firewall and pass unauthorized traffic, including HTTPS and FTP, when UserAuth is configured to proxy HTTP traffic only.

Recommendations For Check Point FireWall-1 version 4.1, reconfigure UserAuth to properly restrict traffic. For Check Point Next Generation (NG), reconfigure UserAuth to properly restrict traffic.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-2405

Affected Products

Check Point Firewall-1

Check Point Next Generation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2405 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html · Note
• http://securityfocus.com/bid/5744 · Note
• http://iss.net/security_center/static/10139.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2405 · Note