CVE-2001-1158 in Firewall-1

Summary

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 07/09/2001
• Moderation: VulDB entry created
• Entries: VDB-16974 (1)
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 7.3
• EPSS: 0.02830
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2001-1158
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2001-1158
• CVE Details: https://www.cvedetails.com/cve/CVE-2001-1158/