Browse CVEs

MEDIUM 6.5 CVE-2008-1397 Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to… Check Point Vpn 1 Pro Patch available Fix from $1,6002008-03-20 HIGH 7.8 CVE-2008-0662 The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRem… Vpn 1 Secureclient Mitigation only Fix from $1,9502008-02-08 HIGH 7.2 CVE-2007-4216 vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet… Zonealarm after 7.0.337.0 Fix from $1,9502007-08-21 HIGH 9.3 CVE-2007-3489 Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the … Vpn 1 Utm Edge Patch available Fix from $1,9502007-06-29 HIGH 7.2 CVE-2007-2730 Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API function… Zonealarm after 6.1.744.001 Fix from $1,9502007-05-16 HIGH 7.8 CVE-2007-2689 Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attacke… Web Intelligence Mitigation only Fix from $1,9502007-05-16 HIGH 7.2 CVE-2007-2174 The IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point ZoneAlarm before 5.0.156.0 allows local users to execu… Zonealarm after 5.0.63.0 Fix from $1,9502007-04-24 HIGH 7.5 CVE-2007-0471 sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and po… Connectra Ngx No fix yet Fix from $1,9502007-01-24 MEDIUM 5.0 CVE-2006-3885 Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot … Firewall 1 Patch available Fix from $1,6002006-07-27 HIGH 7.2 CVE-2006-0255 Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe"… Vpn 1 Mitigation only Fix from $1,9502006-01-18 HIGH 7.2 CVE-2005-2932 Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default pe… Zonealarm after 7.0.337.0 Fix from $1,9502005-12-31 MEDIUM 6.5 CVE-2005-4093 Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modi… Secureclient Ng Mitigation only Fix from $1,6002005-12-08 HIGH 7.8 CVE-2005-3673 The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain c… Check Point Mitigation only Fix from $1,9502005-11-18 HIGH 7.5 CVE-2005-2889 Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intend… Connectra Ngx Mitigation only Fix from $1,9502005-09-14 HIGH 7.8 CVE-2004-2679 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (I… Firewall 1 Mitigation only Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-0699EPSS 6% Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers … Firewall 1 Patch available Fix from $1,9502004-09-28 HIGH 10.0 CVE-2004-0469 Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG … Firewall 1 Patch available Fix from $1,9502004-07-07 HIGH 10.0 CVE-2004-0039EPSS 9% Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point F… Firewall 1 Patch available Fix from $1,9502004-03-03 HIGH 10.0 CVE-2004-0040EPSS 8% Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows… Firewall 1 Patch available Fix from $1,9502004-03-03 MEDIUM 5.0 CVE-2003-0757 Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote reques… Firewall 1 Mitigation only Fix from $1,6002003-10-20 MEDIUM 5.0 CVE-2002-1623EPSS 49% The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or re… Vpn 1 Firewall 1 No fix yet Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-0428 Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire v… Check Point Vpn Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2001-1171 Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which coul… Firewall 1 Patch available Fix from $1,9502002-04-01 MEDIUM 5.0 CVE-2001-1499 Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authe… Vpn 1 Mitigation only Fix from $1,6002001-12-31 MEDIUM 5.0 CVE-2001-1431 Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or… Firewall 1 Mitigation only Fix from $1,6002001-10-08 HIGH 7.5 CVE-2001-0940 Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbit… Firewall 1 Patch available Fix from $1,9502001-09-21 MEDIUM 6.4 CVE-2001-1101 The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when savi… Firewall 1 Patch available Fix from $1,6002001-09-08 MEDIUM 6.2 CVE-2001-1102 Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files th… Firewall 1 Patch available Fix from $1,6002001-09-08 MEDIUM 5.0 CVE-2000-1201 Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. Firewall 1 Mitigation only Fix from $1,6002001-08-31 MEDIUM 5.5 CVE-2001-0682 ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which pre… Zonealarm Pro Mitigation only Fix from $1,6002001-08-29