CVE-2000-0482: Medium severity checkpoint firewall-1 vulnerability
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure Check Point FireWall-1 to drop or limit processing of fragmented IP packets (particularly malformed fragments) to prevent resource exhaustion from large numbers of malformed fragments.
Check Point FireWall-1 fragmented IP packet handling = drop or limit processing of malformed fragmented IP packets - Compensating control
At the network perimeter or on upstream routers/firewalls, block or rate-limit fragmented IP packets (or specifically malformed fragments) from untrusted networks to mitigate remote denial-of-service attempts.
- Operational
Monitor network and firewall logs for spikes in fragmented IP packets and implement temporary ACLs or filters to block offending source IPs while a permanent fix is obtained.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0482?
CVE-2000-0482 has a high severity due to its potential to cause complete denial of service for affected Check Point Firewall-1 versions.
How do I fix CVE-2000-0482?
To fix CVE-2000-0482, upgrade to a patched version of Check Point Firewall-1 that addresses this vulnerability.
Which versions of Check Point Firewall-1 are affected by CVE-2000-0482?
CVE-2000-0482 affects Check Point Firewall-1 versions 4.0 and 4.1.
What type of attack is described in CVE-2000-0482?
CVE-2000-0482 describes a denial of service attack that can be initiated by sending a large number of malformed fragmented IP packets.
Can CVE-2000-0482 impact my network security?
Yes, if exploited, CVE-2000-0482 can lead to significant disruption of network services.