CVE-1999-1204
HighExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Check Point Firewall-1 does not properly handle certain restricted keywords in user-defined objects, which could produce a rule with a default 'ANY' address.
Risk Assessment
This may result in access to more systems than intended by the administrator, increasing the risk of unauthorized access.
Recommendation
It is recommended to review and update firewall rules to ensure they do not contain improper keywords.
Other vulnerabilities in Check Point Firewall-1
See all- CVE-2000-0482Medium
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
- CVE-2000-0150High
Check Point's Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
- CVE-1999-0675Medium
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
Original NVD description (English source)
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.