CVE-2000-1037: High severity checkpoint firewall-1 vulnerability
Published Nov 29, 2000
·Updated
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
Affected Software
3 affected components
Checkpoint Firewall-1=3.0
Checkpoint Firewall-1=4.1
Checkpoint Firewall-1=4.0
Event History
Nov 29, 2000
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1037?
CVE-2000-1037 is considered a medium severity vulnerability due to its potential for brute force attacks.
2
How do I fix CVE-2000-1037?
To fix CVE-2000-1037, ensure you upgrade to a version of Check Point Firewall-1 that addresses this vulnerability.
3
What software versions are affected by CVE-2000-1037?
CVE-2000-1037 affects Check Point Firewall-1 versions 3.0, 4.0, and 4.1.
4
What type of attack is enabled by CVE-2000-1037?
CVE-2000-1037 enables remote attackers to perform brute force password guessing attacks.
5
How does CVE-2000-1037 compromise user security?
CVE-2000-1037 compromises user security by allowing attackers to discern valid usernames through differing error messages.