PT-2009-3770 · Check Point · Check Point Firewall-1

Bugs Nothugs · Published 2009-04-02 · Updated 2024-08-07 · CVE-2009-1227

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Firewall-1 PKI Web Service (affected versions not specified)

Description A buffer overflow issue in the PKI Web Service allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long Authorization or Referer HTTP header to TCP port 18624. The vendor has disputed this issue, stating that they were unable to reproduce the attack and consider it to pose no risk to their customers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1227

Affected Products

Check Point Firewall-1

References · 7

• 🔥 http://securitytracker.com/id?1021948 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html · Exploit
• 🔥 http://securityfocus.com/bid/34286 · Exploit
• 🔥 https://exploit-db.com/exploits/8313 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1227 · Security Note
• https://t.me/cvenotify/89577 · Telegram Post
• http://securityfocus.com/archive/1/502256/100/0/threaded · Note