Firewall-1 vulnerabilities

Firewall-1 does not properly filter script tags, allowing remote attackers to bypass the 'Strip Script Tags' restriction by including an extra < in front of the SCRIPT tag.

Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.