NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis.
References
Configurations
History
21 Nov 2024, 01:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html - Exploit | |
| References | () http://www.securityfocus.com/archive/1/502256/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/34286 - Exploit | |
| References | () http://www.securitytracker.com/id?1021948 - Exploit | |
| References | () https://www.exploit-db.com/exploits/8313 - |
07 Nov 2023, 02:03
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis. |
Information
Published : 2009-04-02 15:30
Updated : 2024-11-21 01:01
NVD link : CVE-2009-1227
Mitre link : CVE-2009-1227
CVE.ORG link : CVE-2009-1227
JSON object : View
Products Affected
checkpoint
- firewall-1_pki_web_service
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer