Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: Check Point Firewall-1 4.x
This vulnerability report for Check Point Firewall-1 4.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in Check Point Firewall-1 4.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor Check Point

Product Link N/A

Affected By 5 Secunia advisories
1 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 20% (1 of 5 Secunia advisories)

Most Critical Unpatched
The most severe unpatched Secunia advisory affecting Check Point Firewall-1 4.x, with all vendor patches applied, is rated Less critical .




5 Secunia Advisories in 2003-2009
Secunia has issued a total of 5 Secunia advisories in 2003-2009 for Check Point Firewall-1 4.x. Currently, 20% (1 out of 5) are marked as unpatched with the most severe being rated Less critical

More information about the specific Secunia advisories affecting Check Point Firewall-1 4.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



Check Point Firewall CIFS Service Group Rule Bypass
Vendor Workaround. Secunia Advisory 1 of 1 in 2005. 10,179 views.
Release Date:
2005-09-26
Secunia Advisory ID:
SA16770
Solution Status:
Vendor Workaround
Criticality:
Impact:
Security Bypass
Where:
From remote
Short Description:
fitz has reported a security issue in Check Point Firewall, which potentially can be exploited by malicious people to bypass certain security restrictions. [Read More]


Check Point FireWall-1 HTTP Parsing Format String Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 1 in 2004. 14,827 views.
Release Date:
2004-02-05
Secunia Advisory ID:
SA10794
Solution Status:
Vendor Patch
Criticality:
Impact:
System access
Where:
From remote
Short Description:
Mark Dowd of ISS X-Force has discovered multiple vulnerabilities in Check Point FireWall-1, which can be exploited by malicious people to compromise a vulnerable firewall. [Read More]


Check Point FireWall-1 multiple vulnerabilities
Partial Fix. Secunia Advisory 1 of 1 in 2003. 7,172 views.
Release Date:
2003-03-21
Secunia Advisory ID:
SA8371
Solution Status:
Partial Fix
Criticality:
Impact:
DoS
System access
Where:
From remote
Short Description:
Two vulnerabilities have been discovered in the syslog daemon included in some versions of Check Point FireWall-1. [Read More]


Checkpoint firewall fails to block https and ftp request in default rule set
Vendor Patch. Secunia Advisory 1 of 2 in 2002. 7,478 views.
Release Date:
2002-09-19
Secunia Advisory ID:
SA7130
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Where:
From local network
Short Description:
If you use the default configuration in Firewall-1 NG base and 4.1 it is possible for users to surf https and ftp sites. [Read More]


Firewall-1 makes it possible to guess valid username
Unpatched. Secunia Advisory 2 of 2 in 2002. 4,822 views.
Release Date:
2002-09-03
Secunia Advisory ID:
SA7063
Solution Status:
Unpatched
Criticality:
Impact:
Exposure of system information
Where:
From remote
Short Description:
It is possible to send an especially formatted IKE aggresive mode packet, which Firewall-1 SecuRemote will respond differently to whether the username supplied was valid or not. [Read More]