CVE-2002-2405 Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the...
MediumCVSS 4.9
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = ng | No fix listed |
References
- 20020918 Firewall-1 HTTP Security Server - Proxy vulnerability mailing-list
- fw1-http-proxy-bypass(10139) vdb-entry
- 5744 vdb-entry