CVE-2001-0182: Medium severity checkpoint firewall-1 vulnerability

Published Mar 26, 2001

Updated

FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.

Affected Software

3 affected components

Checkpoint Firewall-1=4.1

Checkpoint Firewall-1=4.1-sp2

Checkpoint Firewall-1=4.1-sp3

Remediation

Patch Available

http://www.securityfocus.com/bid/2238

Event History

Mar 26, 2001

CVE Published

05:00 AM

Sep 18, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0182?

CVE-2001-0182 is classified as a denial of service vulnerability with a moderate severity level.

How do I fix CVE-2001-0182?

To fix CVE-2001-0182, update your Check Point FireWall-1 software to a version that addresses this vulnerability.

What can an attacker achieve with CVE-2001-0182?

An attacker can exploit CVE-2001-0182 to flood the firewall's console with warning messages, resulting in significant CPU resource consumption.

Which versions of Check Point FireWall-1 are affected by CVE-2001-0182?

CVE-2001-0182 affects Check Point FireWall-1 versions 4.1, 4.1-sp2, and 4.1-sp3.

Is there a workaround for CVE-2001-0182 if I cannot update?

A possible workaround for CVE-2001-0182 is to limit the number of IP packets reaching the firewall through network configuration changes.