CVE-2000-0116: High severity checkpoint firewall-1 vulnerability
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Until a vendor-supplied fix is available, do not rely on the 'Strip Script Tags' restriction as a sole protection. Disable or remove the 'Strip Script Tags' restriction from enforced policies and avoid depending on it to block script content.
Check Point FireWall-1 Strip Script Tags = disable / do not rely - Compensating control
Deploy additional filtering at the edge or application layer (for example a WAF or proxy-based input-filter) to strip or block SCRIPT tags and malformed variants such as an extra '<' in front of SCRIPT (e.g. '<<SCRIPT'). Use this to mitigate the bypass until Check Point provides a fix.
- Operational
Monitor and review firewall and proxy logs for requests containing unusual script-tag patterns (for example sequences with extra '<' characters before SCRIPT) and block or rate-limit offending sources. Investigate and respond to any confirmed bypass attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0116?
CVE-2000-0116 is considered a medium severity vulnerability due to its potential to allow script injection.
How do I fix CVE-2000-0116?
To fix CVE-2000-0116, upgrade your Check Point FireWall-1 to a version that addresses this vulnerability.
What impact does CVE-2000-0116 have on system security?
CVE-2000-0116 allows remote attackers to bypass script tag restrictions, leading to potential malicious script execution.
Is my software vulnerable if I use Check Point FireWall-1 3.0?
Yes, Check Point FireWall-1 version 3.0 is vulnerable to CVE-2000-0116 if it does not have the necessary patches applied.
What type of attacks can CVE-2000-0116 facilitate?
CVE-2000-0116 can facilitate cross-site scripting (XSS) attacks by allowing unauthorized users to inject script code.