CVE-2000-0150
HighExploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Check Point's Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Risk Assessment
Attackers may gain unauthorized access to the FTP server, potentially leading to data leakage or other harmful actions against the organization.
Recommendation
It is recommended to update Firewall-1 to the latest version and configure additional security measures on the FTP server to minimize risk.
Other vulnerabilities in Check Point Firewall-1
See all- CVE-2000-0482Medium
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
- CVE-1999-0675Medium
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
- CVE-1999-1204High
Check Point Firewall-1 does not properly handle certain restricted keywords in user-defined objects, which could produce a rule with a default 'ANY' address.
Original NVD description (English source)
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.