CVE-2001-1101: Medium severity checkpoint firewall-1 vulnerability

Published Sep 8, 2001

Updated

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Affected Software

5 affected components

Checkpoint Firewall-1=3.0

Checkpoint Firewall-1=4.0

Checkpoint Firewall-1=4.1

Checkpoint Firewall-1=4.1-sp1

Checkpoint Firewall-1=4.1-sp2

Remediation

Patch Available

http://www.securityfocus.com/archive/1/212826

Event History

Sep 8, 2001

CVE Published

04:00 AM

Mar 15, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1101?

CVE-2001-1101 has a moderate severity rating due to the potential for arbitrary file overwriting by authenticated users.

How do I fix CVE-2001-1101?

To fix CVE-2001-1101, update your Check Point FireWall-1 software to a version that is not affected by this vulnerability.

Who is affected by CVE-2001-1101?

CVE-2001-1101 affects users of Check Point FireWall-1 versions 3.0 through 4.1 SP2.

Can CVE-2001-1101 be exploited by remote attackers?

CVE-2001-1101 can be exploited by remote authenticated users, allowing them to overwrite log files.

What type of systems are vulnerable to CVE-2001-1101?

CVE-2001-1101 affects systems running the Check Point FireWall-1 GUI on Solaris platforms.