Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html | Patch Vendor Advisory |
Configurations
Information
Published : 2002-03-31 21:00
Updated : 2008-09-05 13:25
NVD link : CVE-2001-1171
Mitre link : CVE-2001-1171
JSON object : View
CWE
Products Affected
checkpoint
- firewall-1