CVE-1999-0770
LowExploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Risk Assessment
The organization may be vulnerable to denial of service attacks, which can lead to service unavailability and disruptions in system operations.
Recommendation
It is recommended to configure shorter timeouts for connections and to monitor connection attempts to detect potential attacks.
Other vulnerabilities in Firewall-1
See all- CVE-2000-0116High
Firewall-1 does not properly filter script tags, allowing remote attackers to bypass the 'Strip Script Tags' restriction by including an extra < in front of the SCRIPT tag.
- CVE-1999-0895High
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
Original NVD description (English source)
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS