Description
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/2952 ↗
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html ↗
- http://www.checkpoint.com/techsupport/alerts/rdp.html ↗
- http://www.kb.cert.org/vuls/id/310295 ↗
- http://www.cert.org/advisories/CA-2001-17.html ↗
- http://ciac.llnl.gov/ciac/bulletins/l-109.shtml ↗
- http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1 ↗
- http://www.osvdb.org/1884 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6815 ↗