CVE-2001-1102: Medium severity checkpoint firewall-1 vulnerability
Published Sep 8, 2001
·Updated
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
Affected Software
4 affected components
Checkpoint Firewall-1=3.0
Checkpoint Firewall-1=4.0
Checkpoint Firewall-1=4.1
Checkpoint Firewall-1=4.1-sp1
Remediation
Patch Available
Patch Available
Event History
Sep 8, 2001
CVE Published
04:00 AM
Mar 15, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1102?
CVE-2001-1102 is considered a medium severity vulnerability due to the risk of local users exploiting symlink attacks.
2
How do I fix CVE-2001-1102?
To fix CVE-2001-1102, ensure proper permissions are set on temporary policy files to prevent world-writable access.
3
Which versions of Check Point FireWall-1 are affected by CVE-2001-1102?
CVE-2001-1102 affects Check Point FireWall-1 versions 3.0b through 4.1 for Solaris.
4
What type of attack is associated with CVE-2001-1102?
CVE-2001-1102 is associated with a symlink attack that allows local users to overwrite arbitrary files.
5
Can CVE-2001-1102 be exploited remotely?
CVE-2001-1102 cannot be exploited remotely as it requires local access to the affected system.