CVE-2000-0804: High severity checkpoint firewall-1 vulnerability

Published Nov 14, 2000

Updated

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."

Affected Software

3 affected components

Checkpoint Firewall-1=3.0

Checkpoint Firewall-1=4.0

Checkpoint Firewall-1=4.1

Event History

Nov 14, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0804?

CVE-2000-0804 is considered a critical vulnerability that allows remote attackers to bypass security checks in affected versions of Check Point VPN-1/FireWall-1.

How do I fix CVE-2000-0804?

To resolve CVE-2000-0804, upgrade to a later version of Check Point VPN-1/FireWall-1 that addresses this vulnerability.

What systems are affected by CVE-2000-0804?

CVE-2000-0804 affects Check Point VPN-1/FireWall-1 versions 3.0, 4.0, and 4.1.

What is the impact of exploiting CVE-2000-0804?

Exploiting CVE-2000-0804 can allow attackers to bypass firewall restrictions, potentially leading to unauthorized access to sensitive network resources.

Is CVE-2000-0804 still relevant today?

CVE-2000-0804 remains relevant for organizations still using the older versions of Check Point FireWall-1, which may still be vulnerable.