CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*
cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*

History

20 Nov 2024, 23:36

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/212826 - Patch, Vendor Advisory () http://www.securityfocus.com/archive/1/212826 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/3303 - Vendor Advisory () http://www.securityfocus.com/bid/3303 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/7095 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/7095 -

Information

Published : 2001-09-08 04:00

Updated : 2024-11-20 23:36


NVD link : CVE-2001-1101

Mitre link : CVE-2001-1101

CVE.ORG link : CVE-2001-1101


JSON object : View

Products Affected

checkpoint

  • firewall-1