CVE-2000-0808: High severity checkpoint firewall-1 vulnerability
Published Nov 14, 2000
·Updated
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."
Affected Software
3 affected components
Checkpoint Firewall-1=3.0
Checkpoint Firewall-1=4.1
Checkpoint Firewall-1=4.0
Event History
Nov 14, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0808?
CVE-2000-0808 is considered a high-severity vulnerability due to the potential for remote authentication bypass.
2
How do I fix CVE-2000-0808?
To fix CVE-2000-0808, upgrade to a patched version of Check Point VPN-1/FireWall-1 beyond 4.1.
3
What types of attacks can exploit CVE-2000-0808?
CVE-2000-0808 can be exploited through brute force attacks on the S/Key authentication mechanism.
4
Which versions of Check Point VPN-1 are affected by CVE-2000-0808?
CVE-2000-0808 affects Check Point FireWall-1 versions 3.0, 4.0, and 4.1.
5
Is user intervention required to mitigate CVE-2000-0808?
Yes, users must actively upgrade their Check Point FireWall-1 software to mitigate CVE-2000-0808.