CVE-2001-1101 The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated use...
MediumCVSS 6.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 3.0 | No fix listed |
| checkpoint firewall-1 | = 4.0 | No fix listed |
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp2 | No fix listed |
References
- 20010908 Bug in remote GUI access in CheckPoint Firewall mailing-list patch vendor-advisory
- 3303 vdb-entry vendor-advisory
- fw1-log-file-overwrite(7095) vdb-entry