CVE-2001-1102 Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-wri...
MediumCVSS 6.2
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 3.0 | No fix listed |
| checkpoint firewall-1 | = 4.0 | No fix listed |
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp1 | No fix listed |
References
- 20010908 Bug in compile portion for older versions of CheckPoint Firewalls mailing-list patch vendor-advisory
- 3300 patch vdb-entry vendor-advisory
- fw1-tmp-file-symlink(7094) vdb-entry