CVE-1999-0675
MediumExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
Risk Assessment
An attacker can disrupt access to services protected by FireWall-1, leading to outages in organizational systems and services.
Recommendation
It is recommended to monitor network traffic and implement filters to block unauthorized UDP packets directed to port 0.
Other vulnerabilities in Check Point FireWall-1
See all- CVE-2000-0482Medium
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
- CVE-2000-0150High
Check Point's Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
- CVE-1999-1204High
Check Point Firewall-1 does not properly handle certain restricted keywords in user-defined objects, which could produce a rule with a default 'ANY' address.
Original NVD description (English source)
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS