CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2000-11-14

Last modified

2024-08-08

Affected products

• Firewall-1 (Checkpoint)

References

• http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-way_Connection
• http://www.osvdb.org/4419
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5468