CVE-2002-2405

Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:firewall-1:ng:*:*:*:*:*:*:*

History

20 Nov 2024, 23:43

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html - () http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html -
References () http://www.iss.net/security_center/static/10139.php - () http://www.iss.net/security_center/static/10139.php -
References () http://www.securityfocus.com/bid/5744 - () http://www.securityfocus.com/bid/5744 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:43


NVD link : CVE-2002-2405

Mitre link : CVE-2002-2405

CVE.ORG link : CVE-2002-2405


JSON object : View

Products Affected

checkpoint

  • firewall-1
CWE
CWE-264

Permissions, Privileges, and Access Controls