CVE-2001-1158 Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP....
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp2 | No fix listed |
| checkpoint firewall-1 | = 4.1_build_41439 | No fix listed |
References
- 20010709 Check Point FireWall-1 RDP Bypass Vulnerability mailing-list patch vendor-advisory
- L-109 government-resource third-party-advisory
- 20010709 Check Point response to RDP Bypass mailing-list
- CA-2001-17 third-party-advisory us-government-resource
- 20010712 RDP Bypass workaround for VPN-1/FireWall 4.1 SPx vendor-advisory
- VU#310295 third-party-advisory us-government-resource
- 1884 vdb-entry
- 2952 patch vdb-entry vendor-advisory
- fw1-rdp-bypass(6815) vdb-entry