PT-2003-1850 · Check Point · Check Point Firewall-1

Published 2003-09-06 · Updated 2008-09-05 · CVE-2003-0757

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Check Point FireWall-1 versions 4.0 through 4.1 before SP5

Description: The issue allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264. This occurs because the IP addresses are leaked in a reply packet.

Recommendations: For Check Point FireWall-1 versions 4.0 through 4.1, apply Service Pack 5 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2003-0757

Affected Products

Check Point Firewall-1

References · 4

• 🔥 https://exploit-db.com/exploits/23087 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0757 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0757 · Note