Check Point Firewall-1 GUI日志查看器漏洞

漏洞信息详情

Check Point Firewall-1 GUI日志查看器漏洞

CNNVD编号：CNNVD-200109-120
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2001-0940
漏洞类型：缓冲区溢出
发布时间： 2001-09-21
威胁类型：远程
更新时间： 2005-05-02
厂商： checkpoint
漏洞来源： .');">This vulnerability...

漏洞简介

Check Point VPN-1/FireWall-1 Management Server 4.0 和4.1版本GUI验证代码存在缓冲区溢出漏洞。远程攻击者借助超长用户名执行任意代码。

漏洞公告

Check Point has made hotfixes available: Check Point Software Next Generation

Check Point Software Hotfix for NG HF2 http://www.checkpoint.com/techsupport/downloads/downloads.html

Check Point Software Firewall-1 4.0 SP8

Check Point Software Hotfix for 4.0 SP8 http://www.checkpoint.com/techsupport/downloads/downloads.html

Check Point Software Firewall-1 4.1 SP4

Check Point Software Hotfix for 4.1 SP4 http://www.checkpoint.com/techsupport/downloads/downloads.html

Check Point Software Firewall-1 4.1 SP5

Check Point Software Hotfix for 4.1 SP5 http://www.checkpoint.com/techsupport/downloads/downloads.html

参考网址

来源: WIN2KSEC 名称: 20010921 Check Point FireWall-1 GUI Buffer Overflow 链接:http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html 来源: BUGTRAQ 名称: 20011128 Firewall-1 remote SYSTEM shell buffer overflow 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100698954308436&w=2 来源: XF 名称: fw1-log-viewer-bo(7145) 链接:http://xforce.iss.net/static/7145.php 来源: BID 名称: 3336 链接:http://www.securityfocus.com/bid/3336 来源: OSVDB 名称: 1951 链接:http://www.osvdb.org/1951 来源: CHECKPOINT 名称: 20010919 GUI Buffer Overflow 链接:http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html 来源: BUGTRAQ 名称: 20010919 Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336) 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100094268017271&w=2 来源: BUGTRAQ 名称: 20011130 Fw: Firewall-1 remote SYSTEM shell buffer overflow 链接:http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html

受影响实体

Checkpoint Firewall-1:4.1
Checkpoint Firewall-1:4.0

补丁

暂无

正文

Check Point Firewall-1 GUI日志查看器漏洞

漏洞信息详情